CISM · Question #389
Which of the following is MOST likely to be impacted when emerging technologies are introduced to an organization?
The correct answer is C. Risk profile. Introducing emerging technologies changes the organization's exposure to threats - new attack surfaces, unknown vulnerabilities, and unfamiliar configurations all alter the overall risk profile. The risk profile is the aggregate view of risks an organization faces, and new…
Question
Which of the following is MOST likely to be impacted when emerging technologies are introduced to an organization?
Options
- ABusiness impact analysis (BIA)
- BControl effectiveness
- CRisk profile
- DSecurity procedures
How the community answered
(44 responses)- A7% (3)
- B11% (5)
- C77% (34)
- D5% (2)
Explanation
Introducing emerging technologies changes the organization's exposure to threats - new attack surfaces, unknown vulnerabilities, and unfamiliar configurations all alter the overall risk profile. The risk profile is the aggregate view of risks an organization faces, and new technology directly affects it. A BIA (A) is impacted only if the technology changes critical business processes. Control effectiveness (B) may be affected, but it is a subset of the broader risk profile change. Security procedures (D) may need updating, but procedure changes are a response to the risk profile change, not the primary impact.
Topics
Community Discussion
No community discussion yet for this question.