Exam focus
A.5.31 is about identifying and meeting obligations. A.5.32 is about protecting intellectual property rights and licence restrictions.
Topic Summary
These controls are compliance-heavy. The exam may test whether the organization can prove obligations are known, current, owned, mapped to controls, and evidenced.
Key Concepts
| Control | Exam cue |
|---|---|
| A.5.31 | Identify, document, keep current, and meet legal/statutory/regulatory/contractual requirements |
| A.5.32 | Protect IP rights for software, content, source code, licences, libraries, and AI-generated material |
Common Exam Traps
- Treating a register as enough without owners or evidence.
- Forgetting contractual requirements.
- Ignoring cryptographic legal requirements.
- Treating software inventory as licence compliance.
- Assuming AI-generated material has no IP risk.
Related Notes
- Iso27001
- Exam
- Compliance
Note Metadata
Source: 09-Exam-Preparation/EXAM-013-Legal-IP-and-Contractual-Compliance.md