Exam ISO-IEC-27001-Lead-Auditor Topic 4 Question 94 Discussion

An employee caught with offense of abusing the internet, such as P2P file sharing or video/audio streaming, will not receive a warning for committing such act but will directly receive an IR, because this is a violation of the organization's information security policy and acceptable use policy. An IR (incident report) is a formal document that records the details of an information security incident and the actions taken to resolve it. An IR may also trigger disciplinary actions against the employee, depending on the severity and impact of the incident. Reference: [CQI & IRCA Certified ISO/IEC 27001:2022 Lead Auditor Training Course], [ISO/IEC 27001:2022 Information technology - Security techniques - Information security management systems - Requirements], Example of an information security policy, Example of an acceptable use policy