Which of the following BEST enables an information security manager to identify changes in the threat landscape due to emerging technologies?

Input from external experts is valuable but might be ad-hoc or focused on specific areas, lacking the systematic and comprehensive approach of a periodic risk assessment.

Annual security assessments typically focus on compliance or a snapshot of current controls, not necessarily on proactively identifying new risks from emerging technologies.

Periodic risk assessments systematically evaluate potential threats, vulnerabilities, and their impacts, incorporating emerging technologies and their associated risks into the analysis. This process helps identify new attack vectors or increased exposure introduced by new technologies, allowing the organization to adapt its security posture proactively.

Benchmarking against industry peers provides a comparative view but might not capture unique risks specific to the organization's adoption of emerging technologies.