PECB Exam Lead-Cybersecurity-Manager Topic 2 Question 15 Discussion

Actual exam question for PECB's Lead-Cybersecurity-Manager exam

Question #: 15
Topic #: 2

[All Lead-Cybersecurity-Manager Questions]

Which of the following is NOT a component of the ISO/IEC 27032 framework?

ACyber incident management

BBusiness strategy formulation

CCybersecurity controls and best practices

DStakeholder cooperation

Show Suggested Answer

Suggested Answer: B

ISO/IEC 27032 focuses on cybersecurity aspects such as cyber incident management, cybersecurity controls and best practices, and stakeholder cooperation. It does not cover business strategy formulation, which is outside its scope.

by Gladis at Dec 10, 2024, 09:57 PM

Limited Time Offer

25%

Off

Get Premium Lead-Cybersecurity-Manager Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Meaghan

3 months ago

I believe D) Stakeholder cooperation is also important for effective cybersecurity management.

upvoted 0 times

...

Andra

3 months ago

I'm not sure, but I think C) Cybersecurity controls and best practices is also a key component.

upvoted 0 times

...

Chantay

3 months ago

B. Business strategy formulation sounds like something you'd find in an MBA program, not a cybersecurity standard. Nice try, though!

upvoted 0 times

...

Kimberlie

3 months ago

Haha, Business strategy formulation? That's like asking a chef to design the restaurant's floor plan. Totally out of scope for this framework.

upvoted 0 times

...

Helaine

3 months ago

I think the correct answer is B. ISO/IEC 27032 is all about cybersecurity guidelines, not business strategy.

upvoted 0 times

Kami

2 months ago

Yes, B is the odd one out. The other options are all components of the ISO/IEC 27032 framework.

upvoted 0 times

...

Gianna

2 months ago

I agree, B is the correct answer. It's not related to business strategy.

upvoted 0 times

...

Fannie

2 months ago

D) Stakeholder cooperation

upvoted 0 times

...

Dino

2 months ago

C) Cybersecurity controls and best practices

upvoted 0 times

...

Blythe

2 months ago

I agree, B is the correct answer. It's not related to business strategy in the ISO/IEC 27032 framework.

upvoted 0 times

...

Georgeanna

2 months ago

B) Business strategy formulation

upvoted 0 times

...

Zita

2 months ago

D) Stakeholder cooperation

upvoted 0 times

...

Mee

2 months ago

C) Cybersecurity controls and best practices

upvoted 0 times

...

Stephaine

2 months ago

A) Cyber incident management

upvoted 0 times

...

Verdell

2 months ago

B) Business strategy formulation

upvoted 0 times

...

Margart

3 months ago

A) Cyber incident management

upvoted 0 times

...

Fabiola

3 months ago

I agree with Malika, because the ISO/IEC 27032 framework focuses more on cybersecurity aspects.

upvoted 0 times

...

Malika

3 months ago

I think the answer is B) Business strategy formulation.

upvoted 0 times

...

Cheryl

4 months ago

Definitely not Business strategy formulation - that's more of a general management thing, not specific to cybersecurity.

upvoted 0 times

Margarett

2 months ago

I think we can all agree that Business strategy formulation is not part of the ISO/IEC 27032 framework.

upvoted 0 times

...

Jacklyn

2 months ago

Yeah, Business strategy formulation is more about overall business planning, not specific to cybersecurity.

upvoted 0 times

...

Lindsay

2 months ago

Definitely not Business strategy formulation, it's more about cybersecurity controls and best practices.

upvoted 0 times

...

Jeannetta

2 months ago

I agree, Business strategy formulation is not a component of the ISO/IEC 27032 framework.

upvoted 0 times

...

Michael

3 months ago

D) Stakeholder cooperation

upvoted 0 times

...

Luke

3 months ago

C) Cybersecurity controls and best practices

upvoted 0 times

...

Terina

3 months ago

B) Business strategy formulation

upvoted 0 times

...

Denny

3 months ago

A) Cyber incident management

upvoted 0 times

...