Exam ISO-IEC-27035-Lead-Incident-Manager Topic 4 Question 78 Discussion

Actual exam question for PECB's ISO-IEC-27035-Lead-Incident-Manager exam
Question #: 78
Topic #: 4
What does the Incident Cause Analysis Method (ICAM) promote?

Suggested Answer: A Vote an answer

Comprehensive and Detailed Explanation From Exact Extract:
The Incident Cause Analysis Method (ICAM) is a root cause analysis technique used across various industries, including cybersecurity, to understand underlying issues behind incidents. It promotes a holistic and structured approach by examining five critical dimensions:
People (human error, behavior, awareness)
Environment (physical or digital conditions)
Equipment (hardware, software, tools)
Procedures (policies, guidelines, workflows)
Organization (culture, leadership, resourcing)
This comprehensive model helps organizations identify both immediate and systemic causes, allowing them to implement more effective corrective actions and prevent recurrence.
Reference:
ICAM Framework (adapted for cyber from industrial safety): "The ICAM methodology provides a structured approach to incident analysis using five contributing factor categories." ISO/IEC 27035-2 supports root cause analysis practices as part of the post-incident review (Clause 6.4.7).
Correct answer: A
-

by Steven at Mar 14, 2026, 08:35 AM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

0
0
0
10