Question 1 of 30
A financial services firm, following ISO 27005:2022 guidelines, has identified a residual risk of data leakage through compromised employee credentials, even after implementing basic password policies and initial security awareness training. The risk treatment plan proposes several control options to further mitigate this risk. When evaluating these options, what is the paramount consideration for selecting the most appropriate control(s) to address this residual risk, ensuring alignment with the organization\'s risk appetite and the principles of effective risk management?
The demonstrable effectiveness of the control in reducing the likelihood and/or impact of the identified risk to an acceptable level.
The extent to which the control aligns with current data protection regulations, such as GDPR or CCPA.
The ease with which the control can be implemented and integrated into existing IT infrastructure.
The availability of existing security tools and technologies within the organization that can be repurposed.

Preparing for ISO 27005:2022 - Information Security Risk Manager Professional? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free