Exam ISO-IEC-27001-Lead-Auditor Topic 2 Question 234 Discussion
Actual exam question for PECB's ISO-IEC-27001-Lead-Auditor exam
Question #: 234
Topic #: 2
Question #: 234
Topic #: 2
Which of the following does a lack of adequate security controls represent?
Suggested Answer: B Vote an answer
Explanation
A lack of adequate security controls represents a vulnerability, which is a weakness or flaw in an asset or its protection that can be exploited by a threat. A vulnerability can increase the likelihood or impact of a security incident, and therefore should be identified and treated as part of the risk management process. ISO/IEC
27001:2022 defines vulnerability as "the absence or weakness of a safeguard that could be exploited by a threat source" (see clause 3.49). References: [CQI & IRCA Certified ISO/IEC 27001:2022 Lead Auditor Training Course], ISO/IEC 27001:2022 Information technology - Security techniques - Information security management systems - Requirements
A lack of adequate security controls represents a vulnerability, which is a weakness or flaw in an asset or its protection that can be exploited by a threat. A vulnerability can increase the likelihood or impact of a security incident, and therefore should be identified and treated as part of the risk management process. ISO/IEC
27001:2022 defines vulnerability as "the absence or weakness of a safeguard that could be exploited by a threat source" (see clause 3.49). References: [CQI & IRCA Certified ISO/IEC 27001:2022 Lead Auditor Training Course], ISO/IEC 27001:2022 Information technology - Security techniques - Information security management systems - Requirements
by Philipppa at Jul 24, 2025, 07:15 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).