Exam CIPM topic 1 question 167 discussion

ISO 27001 is an international standard for information security management systems (ISMS). While it is important for overall security and can support privacy efforts, it is more focused on information security than specifically on fostering a culture of data privacy. It sets out a framework for managing sensitive company information so that it remains secure, but it doesn't directly address the broader cultural aspects of privacy awareness within an organization.

A - because monitoring is different from establishing. The monitoring will come later

Should be B

I suggest B, ISO27001 is more for data protection than data privacy

A ISO 27001 é uma norma internacional que estabelece os requisitos para um Sistema de Gestão de Segurança da Informação (ISMS). Enquanto a segurança da informação é um componente crucial para a proteção da privacidade de dados, aderir à ISO 27001 não necessariamente estabelece uma cultura de privacidade de dados por si só.

The answer should be "A". Why?? https://iapp.org/news/a/how-to-build-a-culture-of-privacy/ "The result is that compliance-focused privacy programs often struggle to engage with stakeholders across the business who may have strategic goals that appear in conflict with protecting personal data. "