PECB Exam ISO-IEC-27005-Risk-Manager Topic 3 Question 1 Discussion

Actual exam question for PECB's PECB Certified ISO/IEC 27005 Risk Manager exam

Question #: 1
Topic #: 3

[All PECB Certified ISO/IEC 27005 Risk Manager Questions]

According to ISO/IEC 27005, what is the output of the documentation of risk management processes?

AKnowledge on the information security risk assessment and treatment processes in accordance with clauses 7 and 8 of the standard

BDocumented information about the information security risk assessment and treatment results

CDocumented information that is necessary for the effectiveness of the information security risk assessment or risk treatment processes

Show Suggested Answer

Suggested Answer: B

According to ISO/IEC 27005, the output of the documentation of risk management processes should include detailed information about the results of the risk assessment and the chosen risk treatment options. This ensures transparency and provides a clear record of the decision-making process related to information security risk management. Therefore, option B is the correct answer.

by Fletcher at Sep 09, 2024, 09:24 AM

Limited Time Offer

25%

Off

Get Premium ISO-IEC-27005-Risk-Manager Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Avery

1 months ago

B is the way to go. Documenting the actual results of the risk assessment and treatment is the key output, not just the process knowledge.

upvoted 0 times

...

Kattie

1 months ago

I believe it could also be C) Documented information that is necessary for the effectiveness of the risk assessment or treatment processes.

upvoted 0 times

...

Kayleigh

1 months ago

Haha, these questions are like a game of 'guess the ISO standard'! I'll go with A, just to mix things up a bit.

upvoted 0 times

Truman

10 hours ago

User3: A) Knowledge on the information security risk assessment and treatment processes in accordance with clauses 7 and 8 of the standard sounds right to me.

upvoted 0 times

...

Wayne

12 days ago

User2: I'm going with C) Documented information that is necessary for the effectiveness of the information security risk assessment or risk treatment processes.

upvoted 0 times

...

Darrin

27 days ago

User1: I think the output is B) Documented information about the information security risk assessment and treatment results.

upvoted 0 times

...

2 months ago

I think the correct answer is B. The standard clearly states that the output should be the documented information about the results of the risk assessment and treatment processes.

upvoted 0 times