Which of the options below presents a minor nonconformity?
A.
The risk assessment methodology prevents evaluation of information security risks
B.
The contract of the company with its supplier does not have the appropriate document version control
C.
The backup of data is performed once a month, while the company's procedure requires daily backups
The Answer Is:
C
This question includes an explanation.
Explanation:
This is a minor nonconformity. The backup frequency not adhering to the company's procedure of daily backups but occurring once a month represents a deviation from established processes, yet it might not immediately impact the effectiveness of the information security management system.