PECB ISO-IEC-27005-Risk-Manager Exam With Confidence Using Practice Dumps

Information security aims to protect information assets against threats and vulnerabilities that could lead to unauthorized access, disclosure, alteration, or destruction. By implementing effective security measures (such as access controls, encryption, and monitoring), an organization reduces the likelihood of vulnerabilities being exploited and mitigates the potential impact of risks. According to ISO/IEC 27005, risk management in information security includes identifying, assessing, and applying controls to reduce both the likelihood and impact of potential risks. Thus, option A is correct because it acknowledges the role of information security in reducing the impact of risks. Option B is incorrect because information security is a key component of risk management, and option C is incorrect because information security does not eliminate risks entirely; it mitigates their impact.

Aqualitative risk analysismethod uses nonnumerical categories such as low, medium, and high to describe the consequences and probability of risks. This method involves subjective judgment based on expertise, experience, and intuition rather than mathematical calculations. Qualitative methods are often used when it is challenging to obtain accurate numerical data, and they provide a general understanding of risks to prioritize them for further action. Option C is correct because the use of nonnumerical categories aligns with the qualitative risk analysis methodology. Option A (Quantitative) is incorrect as it involves numerical values and statistical methods, while Option B (Semi-quantitative) is a mix of qualitative and quantitative methods, usually involving ranges of numerical values.

Security cameras and alarm systems are consideredtechnical controlsin the context of information security. Technical controls, also known as logical controls, involve the use of technology to protect information and information systems. These controls are designed to prevent or detect security breaches and mitigate risks related to physical access and surveillance. While security cameras and alarms are physical in nature, they fall under the broader category of technical controls because they involve electronic monitoring and alert systems. Option B (Managerial) refers to administrative policies and procedures, and option C (Legal) refers to controls related to compliance with laws and regulations, neither of which applies in this case.