Question 1 of 30
A global e-commerce firm, \"AstroGoods,\" is migrating its customer database to a new Software-as-a-Service (SaaS) provider for its customer relationship management (CRM) platform. This platform will house personally identifiable information (PII) and transaction histories for millions of customers worldwide. AstroGoods is particularly concerned about maintaining the confidentiality and integrity of this data, as well as being able to reconstruct events in case of a security incident, which could have significant legal repercussions under various data protection regulations. Which ISO 27001:2022 control, as detailed in ISO 27002:2022, is most critical for establishing an auditable trail of activities within the SaaS CRM to support incident investigation and compliance?
A.8.16 Monitoring activities
A.5.23 Information security for use of cloud services
A.8.15 Access control
A.8.23 Use of cryptography

Preparing for ISO 27001:2022 - Information Security Controls Professional (based on ISO 27002:2022)? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free