ISO 27001:2022 Requirements Free Practice Test — 30 Questions

30 questions · Full explanations · No account required

Free
Question 1 of 30

A financial advisor, Esme, uses a specialized wealth management software to store sensitive client data, including SIN numbers, banking information, and investment details. Esme discovers a publicly known vulnerability in the software that could allow unauthorized access to this data. Esme has a fiduciary duty to her clients under provincial securities regulations and is also subject to the federal Personal Information Protection and Electronic Documents Act (PIPEDA). Which of the following actions represents the MOST appropriate and compliant response to this discovery, considering both her ethical obligations and legal responsibilities under PIPEDA?

Immediately document the vulnerability, conduct a risk assessment to determine potential impact and likelihood, implement a remediation plan prioritizing patching or compensating controls, and consult legal counsel to determine reporting obligations under PIPEDA and other relevant privacy laws.
Inform all clients that a vulnerability exists in the software and advise them to monitor their accounts for any suspicious activity, while continuing to use the software without any immediate changes to security protocols.
Contact the firm's insurance provider to ensure the firm is covered for potential data breaches, and then continue using the software, reasoning that all software has vulnerabilities and the firm has cyber insurance.
Ignore the vulnerability, as the software vendor is responsible for security, and focusing on it would take away time from advising clients on investment strategies.

About the ISO 27001:2022 Requirements Certification

These free practice questions are designed to help you assess your readiness for the ISO 27001:2022 Requirements exam by ISO. Each question comes with a detailed explanation to reinforce the correct concept. For a complete exam preparation experience with hundreds of questions, spaced-repetition study tools, and full exam simulations, explore our premium access.