Exam ISO-IEC-27001-Lead-Implementer Topic 6 Question 166 Discussion

Actual exam question for PECB's ISO-IEC-27001-Lead-Implementer exam
Question #: 166
Topic #: 6
Question:
Whom should an organization interview to obtain information regarding information security risks in their respective fields?

Suggested Answer: C Vote an answer

ISO/IEC 27001:2022 Clause 4.2 -Understanding the needs and expectations of interested partiesstates:
"The organization shall determine:
a) interested parties that are relevant to the ISMS;
b) the relevant requirements of these interested parties."
Risk identification must incorporate input fromall relevant stakeholders, including but not limited to experts.
In fact,ISO/IEC 27005:2022emphasizesstakeholder engagementin risk assessments to improve understanding of risk context and ensure comprehensive input.

by Eartha at Jun 14, 2025, 03:13 PM

Limited Time Offer

15%

Off

Get Premium ISO-IEC-27001-Lead-Implementer Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10