PECB Lead Implementer (ISO/IEC 27001) — Question 30

Based on scenario 4, the fact that TradeB defined the level of risk based on three nonnumerical categories indicates that:

Answer options

• A. The level of risk will be evaluated against qualitative criteria
• B. The level of risk will be defined using a formula
• C. The level of risk will be evaluated using quantitative analysis

Correct answer: A

Explanation

The correct answer is A because qualitative criteria involve non-numerical assessments, which aligns with the use of non-numerical categories. Options B and C suggest a numerical or formulaic approach, which contradicts the scenario's emphasis on non-numerical categories.