Exam ISO-IEC-27001-Lead-Implementer Topic 1 Question 79 Discussion

Actual exam question for PECB's ISO-IEC-27001-Lead-Implementer exam
Question #: 79
Topic #: 1
Scenario:
A manufacturing company faced a risk of production delays due to potential supply chain disruptions. After assessing the potential impact, the company concluded the disruption was unlikely to significantly affect operations. The company decided to accept the risk.
Question:
Which risk treatment option did the company select in this case?

Suggested Answer: B Vote an answer

According to ISO/IEC 27001:2022 Clause 6.1.3 (a), an organization must determine appropriaterisk treatment options. ISO 27005:2022 (Clause 8.2.2) definesrisk retentionas:
"The decision to accept the risk without taking any action to reduce it, often because the cost of mitigation is greater than the benefit." The company assessed the likelihood and impact of the risk and decidednot to mitigate, which qualifies as risk retention(also known as risk acceptance in ISO 27001 Clause 6.1.3(f)).

by Mona at May 18, 2025, 07:26 AM

Limited Time Offer

15%

Off

Get Premium ISO-IEC-27001-Lead-Implementer Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10