PECB ISO-22301-Lead-Auditor Exam - Topic 7 Question 61 Discussion

Actual exam question for PECB's ISO-22301-Lead-Auditor exam

Question #: 61
Topic #: 7

[All ISO-22301-Lead-Auditor Questions]

Which review uncover's vulnerability and exposure of the organizational activities to specific types or risk?

ACrisis Assessment

BContinuity Assessment

CCritical Assessment

DRisk Assessment

Show Suggested Answer

Suggested Answer: D

A risk assessment is a review that uncovers the vulnerability and exposure of the organizational activities to specific types or risk. A risk assessment helps to identify, analyze, and evaluate the potential threats and impacts that could affect the organization's ability to achieve its objectives and maintain its continuity. A risk assessment also helps to determine the appropriate risk treatment options and controls to reduce the likelihood and/or consequences of the risks. A risk assessment is an essential part of the business continuity management system (BCMS) as it enables the organization to prioritize its business continuity requirements and resources based on the level of risk.Reference:

ISO 22301 Auditing eBook, page 25

ISO 22301:2019, clause 6.1.2

by Emile at Jul 08, 2025, 08:25 AM

Limited Time Offer

25%

Off

Get Premium ISO-22301-Lead-Auditor Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Coleen

7 months ago

Totally agree, Risk Assessment is the key here!

upvoted 0 times

...

Melvin

7 months ago

Wait, is it really just Risk Assessment? Seems too simple.

upvoted 0 times

...

Lamar

7 months ago

Definitely Risk Assessment! It’s all about identifying vulnerabilities.

upvoted 0 times

...

Jerrod

7 months ago

Continuity Assessment is more about recovery, not exposure.

upvoted 0 times

...

Ben

7 months ago

I think Crisis Assessment could also fit, but not as well.

upvoted 0 times

...

Felicidad

8 months ago

I’m confused between Risk Assessment and Critical Assessment. I know Risk Assessment deals with vulnerabilities, but I can’t recall the specifics of Critical Assessment.

upvoted 0 times

...

Kiley

8 months ago

I’m leaning towards Continuity Assessment, but I feel like that focuses more on recovery rather than identifying vulnerabilities directly.

upvoted 0 times

...

Adell

8 months ago

I remember practicing a question similar to this, and I think Crisis Assessment was mentioned as a way to evaluate risks, but it doesn’t seem quite right here.

upvoted 0 times

...

Eric

8 months ago

I think the answer might be Risk Assessment, but I’m not entirely sure. It seems to fit the description of identifying vulnerabilities.

upvoted 0 times

...

Natalie

9 months ago

I'm a little confused by the wording of this question. I'm not entirely sure what they're looking for in terms of the "specific types of risk." I'll need to re-read the question carefully and consider each option before making a decision.

upvoted 0 times

...

Jose

9 months ago

Risk Assessment, got it. That makes sense - this type of review is designed to uncover an organization's vulnerabilities and exposure to different risks. I feel confident about this answer.

upvoted 0 times

...

Dana

9 months ago

Okay, let me see. The key is to identify which type of review would reveal the organization's vulnerabilities and exposure to specific risks. I'm leaning towards Risk Assessment, but I want to double-check the other options just to be sure.

upvoted 0 times

...

Dolores

9 months ago

Hmm, I'm a bit unsure about this one. I'm debating between Risk Assessment and Continuity Assessment. I'll need to think it through carefully before selecting an answer.

upvoted 0 times

...

Sharen

9 months ago

This question seems straightforward - I think the answer is Risk Assessment, as that type of review would uncover the organization's vulnerabilities and exposure to different risks.

upvoted 0 times

...