Which of the following is the BEST method for determining whether new risks exist in legacy systems?

The correct answer is D. Regularly scheduled risk assessments. Regularly scheduled risk assessments are the best method for determining whether new risks exist in legacy systems. These assessments allow for an ongoing review of the systems to identify emerging risks, vulnerabilities, or changes in the threat landscape that may not have…

Submitted by ashley.k· Apr 18, 2026Information Security Risk Management

Question

Options

AFrequent security architecture reviews
BRegularly scheduled security audits
CFrequent updates to the risk register
DRegularly scheduled risk assessments

How the community answered

(29 responses)

A
17% (5)
B
7% (2)
C
3% (1)
D
72% (21)

Explanation

Regularly scheduled risk assessments are the best method for determining whether new risks exist in legacy systems. These assessments allow for an ongoing review of the systems to identify emerging risks, vulnerabilities, or changes in the threat landscape that may not have been previously addressed, ensuring that any new risks are detected and mitigated in a timely manner.

Topics

#Risk assessment#Risk identification#Legacy systems#Information security risk management

Community Discussion

No community discussion yet for this question.

Full CISM Practice