Q: 16
The purpose of control 7.2 Physical entry of ISO/IEC 27001 is to ensure only authorized access to, the organization's information and other associated assets occur. Which action below does NOT fulfill this purpose?
Options
Discussion
Option A Had something like this in a mock, A doesn't directly tie to physical entry control.
Argh, these control descriptions are always a pain. C here, since just having access points isn't enough if they aren't properly secured.
Probably A, since verifying equipment relates more to asset management controls, not physical entry. 7.2 is all about controlling who gets in, not checking devices. Makes sense if you look at how ISO splits those domains. If anyone sees it different let me know!
C
Be respectful. No spam.