MENU
What is the greatest risk for an organization if no information security policy has been defined?
Suggested Answer: D
Get Premium ISO-IEC-27001-Lead-Implementer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
FI
Fidelia
11 months ago
Totally agree with D, without a policy, chaos reigns!
GE
Georgeanna
11 months ago
Surprised that people think too many measures (C) is a risk, isn't that better?
JI
Jina
12 months ago
B is a big issue, security shouldn't be a solo job!
TH
Thomasena
12 months ago
I think D is more accurate, consistency is key for security.
GL
Glenn
12 months ago
Definitely A, can't track who did what without individual accounts.
PA
Patria
1 year ago
I vaguely recall that without a defined policy, it could lead to chaos in security measures, which might relate to option D.
SO
Soledad
1 year ago
I feel like this question is similar to one we practiced about accountability in security roles. I think option A might be a concern too.
JA
James
1 year ago
I’m not entirely sure, but I think option D sounds right because without a policy, it’s hard to have a unified approach to security.
BE
Benton
1 year ago
I remember discussing how a lack of policy could lead to inconsistent security practices across the organization.
DE
Desire
1 year ago
This seems like a straightforward question on consumer behavior. I'll focus on the key terms in the question and think through the options carefully.
VA
Valda
1 year ago
Hmm, the first option about the distorted unit cost seems like it could be a pretty big issue, but I'm not sure if that's the least motivating one. I'll have to weigh the pros and cons of each choice.
MA
Marti
1 year ago
Easy peasy! A UPS is designed to provide backup power for a limited time, usually around 10-15 minutes, to allow you to save your work and shut down your systems properly. So the answer is D. 10 minutes.