Isaiec 62443 Cybersecurity Fundamentals Specialist · Free Practice Question Easy
Question 35
Why is documentation critical in the risk assessment and auditing world?
- A It prevents vulnerabilities from being identified
- B It eliminates the need for stakeholder involvement
- C It establishes a baseline and proves actions were taken
- D It ensures compliance with industry standards
Reveal correct answer
Correct answer: C
Explanation
Documentation in risk assessments and audits serves as a foundational element by establishing a baseline of an organization's security posture, including identified risks, controls, and mitigation strategies. It provides evidence that assessments were conducted, vulnerabilities were addressed, and corrective actions were implemented, which is crucial during audits to demonstrate compliance with regulations or standards. Proper documentation supports accountability and traceability, ensuring that stakeholders can verify processes and outcomes. It does not prevent vulnerability identification, eliminate stakeholder involvement, or solely ensure compliance, but rather supports a broader process of risk management and verification.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
