Which tool is used to identify, analyze, and manage interested parties?

Which tool is used to identify, analyze, and manage interested parties?
A . The probability/impact matrix
B . The power/interest matrix
C . The likelihood/severity matrix

View Answer

Answer: B

Explanation:

The power/interest matrix is a tool that can be used to identify, analyze, and manage interested parties according to ISO/IEC 27001:2022. The power/interest matrix is a two-dimensional diagram that plots the level of power and interest of each interested party in relation to the organization’s information security objectives. The power/interest matrix can help the organization to prioritize the interested parties, understand their expectations and needs, and develop appropriate communication and engagement strategies. The power/interest matrix can also help the organization to identify potential risks and opportunities related to the interested parties.

Reference: ISO/IEC 27001:2022, clause 4.2; PECB ISO/IEC 27001 Lead Implementer Course, Module 4, slide 12.