PECB
LEAD-IMPLEMENTER · Question #294
What is the purpose of the risk treatment plan in the context of ISO 27001?
The correct answer is D. The risk treatment plan outlines how identified risks will be managed. See the full explanation below for the reasoning.
Question
What is the purpose of the risk treatment plan in the context of ISO 27001?
Options
- AThe risk treatment plan is solely for compliance purposes.
- BThe risk treatment plan is only necessary for large organizations.
- CThe risk treatment plan is a list of all potential risks.
- DThe risk treatment plan outlines how identified risks will be managed.
How the community answered
(30 responses)- A7% (2)
- B10% (3)
- C3% (1)
- D80% (24)
Community Discussion
No community discussion yet for this question.