Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

PECB ISO-22301-Lead-Auditor Exam - Topic 7 Question 61 Discussion

Posted by Emile on Jul 08, 2025 at 08:25 AM

Which review uncover's vulnerability and exposure of the organizational activities to specific types or risk?

Suggested Answer: D

A risk assessment is a review that uncovers the vulnerability and exposure of the organizational activities to specific types or risk. A risk assessment helps to identify, analyze, and evaluate the potential threats and impacts that could affect the organization's ability to achieve its objectives and maintain its continuity. A risk assessment also helps to determine the appropriate risk treatment options and controls to reduce the likelihood and/or consequences of the risks. A risk assessment is an essential part of the business continuity management system (BCMS) as it enables the organization to prioritize its business continuity requirements and resources based on the level of risk.Reference:

ISO 22301 Auditing eBook, page 25

ISO 22301:2019, clause 6.1.2


Get Premium ISO-22301-Lead-Auditor Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
32 comments · newest first
CO
Coleen 10 months ago
Totally agree, Risk Assessment is the key here!
ME
Melvin 10 months ago
Wait, is it really just Risk Assessment? Seems too simple.
LA
Lamar 10 months ago
Definitely Risk Assessment! It’s all about identifying vulnerabilities.
JE
Jerrod 10 months ago
Continuity Assessment is more about recovery, not exposure.
BE
Ben 10 months ago
I think Crisis Assessment could also fit, but not as well.
FE
Felicidad 11 months ago
I’m confused between Risk Assessment and Critical Assessment. I know Risk Assessment deals with vulnerabilities, but I can’t recall the specifics of Critical Assessment.
KI
Kiley 11 months ago
I’m leaning towards Continuity Assessment, but I feel like that focuses more on recovery rather than identifying vulnerabilities directly.
AD
Adell 11 months ago
I remember practicing a question similar to this, and I think Crisis Assessment was mentioned as a way to evaluate risks, but it doesn’t seem quite right here.
ER
Eric 11 months ago
I think the answer might be Risk Assessment, but I’m not entirely sure. It seems to fit the description of identifying vulnerabilities.
NA
Natalie 12 months ago
I'm a little confused by the wording of this question. I'm not entirely sure what they're looking for in terms of the "specific types of risk." I'll need to re-read the question carefully and consider each option before making a decision.
JO
Jose 12 months ago
Risk Assessment, got it. That makes sense - this type of review is designed to uncover an organization's vulnerabilities and exposure to different risks. I feel confident about this answer.
DA
Dana 12 months ago
Okay, let me see. The key is to identify which type of review would reveal the organization's vulnerabilities and exposure to specific risks. I'm leaning towards Risk Assessment, but I want to double-check the other options just to be sure.
DO
Dolores 1 year ago
Hmm, I'm a bit unsure about this one. I'm debating between Risk Assessment and Continuity Assessment. I'll need to think it through carefully before selecting an answer.
SH
Sharen 1 year ago
This question seems straightforward - I think the answer is Risk Assessment, as that type of review would uncover the organization's vulnerabilities and exposure to different risks.
BE
Bernardine 1 year ago
Risk Assessment is the obvious choice here. Unless the exam is trying to trick us, which would be a risky move on their part.
KR
Kristian 1 year ago
↳ replying to Bernardine
Risk Assessment
AR
Aron 1 year ago
Hmm, I'm going with D too. The other options just don't seem to fit the question as well as Risk Assessment does.
RE
Reuben 1 year ago
↳ replying to Aron
I agree, Risk Assessment is the best choice.
SA
Santos 1 year ago
↳ replying to Aron
Yeah, Risk Assessment makes the most sense.
HY
Hyman 1 year ago
↳ replying to Aron
I think it's D) Risk Assessment.
DE
Derrick 1 year ago
D has got to be the right answer. I mean, what else would 'uncover vulnerability and exposure to risk' be if not a risk assessment?
CH
Chaya 1 year ago
↳ replying to Derrick
C) Critical Assessment
BE
Benedict 1 year ago
↳ replying to Derrick
B) Continuity Assessment
RI
Ricarda 1 year ago
↳ replying to Derrick
A) Crisis Assessment
TA
Talia 1 year ago
I agree, risk assessment is crucial for understanding the exposure to different types of risks.
BE
Beata 1 year ago
I think the answer is D. Risk Assessment. It's the one that specifically mentions uncovering vulnerabilities and exposure to risks.
MA
Malcom 1 year ago
↳ replying to Beata
Yes, D) Risk Assessment is the correct answer. It helps identify potential risks and vulnerabilities in organizational activities.
GU
Gussie 1 year ago
↳ replying to Beata
Yes, Risk Assessment is the correct answer for identifying and assessing potential risks.
BR
Britt 1 year ago
↳ replying to Beata
I agree, D) Risk Assessment is the one that focuses on uncovering vulnerabilities and exposure to risks.
AN
Antonio 1 year ago
↳ replying to Beata
I agree, D) Risk Assessment is the one that focuses on uncovering vulnerabilities and exposure to risks.
TW
Twanna 1 year ago
I think it's D too, because risk assessment helps identify potential vulnerabilities.
JU
Julieta 1 year ago
D) Risk Assessment
0/2000 characters

Save Cancel