PECB Lead-Cybersecurity-Manager Exam - Topic 3 Question 26 Discussion

Actual exam question for PECB's Lead-Cybersecurity-Manager exam

Question #: 26
Topic #: 3

[All Lead-Cybersecurity-Manager Questions]

Based on scenario 3, which risk treatment option did EsTeeMed select after analysing the Incident?

ARisk sharing

BRisk avoidance

CRisk retention

Show Suggested Answer

Suggested Answer: C

After analyzing the incident, EsteeMed decided to accept the actual risk level, deeming the likelihood of a similar incident occurring in the future as low and considering the existing security measures as sufficient. This decision indicates that EsteeMed selected the risk treatment option of risk retention, where the organization accepts the risk and continues operations without additional measures.

ISO/IEC 27005:2018 - Provides guidelines for information security risk management and details various risk treatment options, including risk retention, where risks are accepted by the organization.

NIST SP 800-39 - Managing Information Security Risk, which discusses risk management strategies including risk retention.

by Ronnie at Jan 05, 2026, 05:16 AM

Limited Time Offer

25%

Off

Get Premium Lead-Cybersecurity-Manager Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Regenia

3 days ago

I'm going with A) Risk sharing. Sharing the risk with another party could be a smart move in this situation.

upvoted 0 times

...

Jacklyn

8 days ago

B) Risk avoidance seems like the best option here. Avoiding the risk altogether is the safest approach.

upvoted 0 times

...

Son

13 days ago

I think the answer is C) Risk retention. It seems like the most logical choice based on the scenario.

upvoted 0 times

...

Alease

18 days ago

I’m leaning towards risk avoidance, but I need to double-check the scenario details to be certain.

upvoted 0 times

...

Mabelle

23 days ago

I feel like risk retention could be a possibility too, especially if they decided to accept the consequences of the incident.

upvoted 0 times

...

Viola

29 days ago

I remember a practice question where risk sharing was the best option, but I can't recall if that applies here.

upvoted 0 times

...

Amina

1 month ago

I think EsTeeMed might have gone with risk avoidance since they were analyzing an incident, but I'm not entirely sure.

upvoted 0 times

...

Dick

1 month ago

This question requires a solid understanding of the risk treatment options. I'll need to apply my knowledge of the concepts to determine the best answer.

upvoted 0 times

...

Georgeanna

1 month ago

I've got a good feeling about this one. I think the answer is risk avoidance, but I'll make sure to justify my reasoning in the exam.

upvoted 0 times

...

Lonna

2 months ago

I'm a bit unsure about this one. I'll need to re-read the scenario carefully and consider the pros and cons of each risk treatment option before making my choice.

upvoted 0 times

...

Cherrie

2 months ago

Okay, let me think this through. Based on the information provided, I'm leaning towards risk retention as the most likely option, but I'll double-check the details to be sure.

upvoted 0 times

...

Xuan

2 months ago

Hmm, this seems like a tricky one. I'll need to carefully review the details of scenario 3 to determine which risk treatment option EsTeeMed selected.

upvoted 0 times

...