PECB ISO-IEC-27001-Lead-Implementer Exam With Confidence Using Practice Dumps

Annex A control A.8.26 Application security requirements mandates that security requirements must be identified, specified, and approved during the development or acquisition of applications.

“Information security requirements shall be identified, specified and approved when developing or acquiring applications.”

— ISO/IEC 27001:2022, Annex A, Control 8.26 Application security requirementsQuestion No. 22/80

What iS the purpose of ISO,'IEC 27002 clause 8ü8?

TO ensure all security requitements are addressed during application development

To ensure software is written securely to reduce information security vulnerabilities

To ensure secure system design principles are followed

Annex A Control A.6.1 of ISO/IEC 27001:2022 (and ISO/IEC 27002:2022 Clause 6.1) covers Screening:

“Background verification checks on all candidates for employment should be carried out in accordance with relevant laws, regulations and ethics, and proportional to the business requirements, the classification of the information to be accessed, and the perceived risks.”

If collective agreements (e.g., labor union agreements) or local labor laws prohibit such checks, this is a valid justification for exclusion in the Statement of Applicability (SoA), per ISO/IEC 27001:2022 Clause 6.1.3 (d), which allows exclusions when properly justified.