What type of legislation requires a proper controlled purchase process?

What type of legislation requires a proper controlled purchase process?

A. Personal data protection act

B. Computer criminality act

C. Government information act

D. Intellectual property rights act

Answer: D

Explanation:

An intellectual property rights act is a type of legislation that requires a proper controlled purchase process. Intellectual property rights are legal rights that protect creations of the mind, such as inventions, literary and artistic works, designs, symbols, names and images. Intellectual property rights can include patents, trademarks, copyrights, trade secrets, etc. A proper controlled purchase process is a process that ensures that the organization obtains valid licenses or permissions from the owners or authorized parties of the intellectual property rights before using or acquiring any intellectual property assets. This process helps to avoid infringing on the intellectual property rights of others, which may result in legal actions, fines, damages or reputational harm. ISO/IEC 27001:2022 requires the organization to comply with relevant legal and contractual obligations related to intellectual property rights (see clause A.18.1.4).

Reference: [CQI & IRCA Certified ISO/IEC

27001:2022 Lead Auditor Training Course], ISO/IEC 27001:2022 Information technology ― Security techniques ― Information security management systems ― Requirements, What is Intellectual Property?