Exam ISO-IEC-27001-Lead-Implementer Topic 1 Question 173 Discussion

Actual exam question for PECB's ISO-IEC-27001-Lead-Implementer exam
Question #: 173
Topic #: 1
BotaneBloom considered launching a chatbot powered by a third-party generative AI platform. However, a risk assessment revealed serious concerns related to data privacy, model unpredictability, and lack of transparency. The legal team identified potential GDPR noncompliance. Following internal reviews, executive leadership decided to postpone the chatbot deployment until a more secure and transparent solution could be guaranteed.
Which risk treatment strategy did BotaneBloom apply regarding the chatbot deployment? Refer to Scenario 2.

Suggested Answer: A Vote an answer

ISO/IEC 27001:2022 Clause 6.1.3 and ISO/IEC 27005:2022 define four risk treatment options: avoidance (not pursuing the activity), modification (applying controls), sharing (transferring risk to a third party), and retention (accepting the risk). In this scenario, BotaneBloom decided to postpone and not proceed with the chatbot deployment due to identified risks related to data privacy, AI unpredictability, and GDPR noncompliance. Choosing not to engage in an activity to eliminate the associated risk is the definition of risk avoidance. Risk retention would mean accepting and living with the risk. Risk acceptance to pursue an opportunity involves knowingly accepting increased risk for potential benefit. Since BotaneBloom stopped the activity entirely rather than accepting or modifying the risk, risk avoidance is the correct treatment option applied.

by Levi at Aug 20, 2026, 08:36 AM

Limited Time Offer

15%

Off

Get Premium ISO-IEC-27001-Lead-Implementer Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10