Discuss PECB ISO-IEC-27005-Risk-Manager Exam Topic 1 Question 33

Does information security reduce the impact of risks?

AYes, information security reduces risks and their impact by protecting the organization against threats and vulnerabilities

BNo, information security does not have an impact on risks as information security and risk management are separate processes

CYes, information security reduces the impact of risks by eliminating the likelihood of exploitation of vulnerabilities by threats

Suggested Answer: A

Information security aims to protect information assets against threats and vulnerabilities that could lead to unauthorized access, disclosure, alteration, or destruction. By implementing effective security measures (such as access controls, encryption, and monitoring), an organization reduces the likelihood of vulnerabilities being exploited and mitigates the potential impact of risks. According to ISO/IEC 27005, risk management in information security includes identifying, assessing, and applying controls to reduce both the likelihood and impact of potential risks. Thus, option A is correct because it acknowledges the role of information security in reducing the impact of risks. Option B is incorrect because information security is a key component of risk management, and option C is incorrect because information security does not eliminate risks entirely; it mitigates their impact.

Get Premium ISO-IEC-27005-Risk-Manager Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

21 comments · newest first

Amie 2 days ago

I disagree, B makes sense. They are separate processes.

Jaclyn 7 days ago

I feel A is right. Security measures are crucial.

Carmelina 12 days ago

I lean towards C. It stops exploitation of vulnerabilities.

Portia 17 days ago

Definitely A! It protects us from threats.

Teresita 23 days ago

B worries me. Ignoring security's role could be dangerous.

Casie 28 days ago

I still lean towards A. It’s about proactive protection.

Lanie 1 month ago

C is valid. If we eliminate vulnerabilities, risks drop significantly.

Rolande 1 month ago

I feel A is the best choice. It shows the importance of security.

Franchesca 1 month ago

But B has a point. Security and risk management are different.

Fairy 2 months ago

C makes sense. Reducing exploitation is key.

Gladys 2 months ago

I agree with A too. It’s all about defense against threats.

Micaela 2 months ago

I think A is right. Security measures really help protect us.

Casey 2 months ago

Not sure if it really eliminates risks completely, though.

Corinne 2 months ago

Definitely, it protects against threats and keeps data safe.

Domingo 2 months ago

Surprised to see anyone say it doesn't help at all!

Hubert 3 months ago

I think it's more about managing risks than just reducing them.

Hannah 3 months ago

Totally agree, info security is key to minimizing risks!

Moon 3 months ago

I practiced a question similar to this, and I remember that information security does play a role in mitigating risks, so I lean towards A or C.

Denna 3 months ago

I feel like option C is also valid since reducing the likelihood of exploitation seems like a key part of risk management, but I can't recall the exact details.

Jesusita 3 months ago

I'm not so sure about option B; I remember studying that information security and risk management are closely linked, but maybe they aren't the same thing?

Val 4 months ago

I think option A makes sense because information security measures definitely help protect against various threats.

PECB ISO-IEC-27005-Risk-Manager Exam - Topic 1 Question 33 Discussion