Which of the following is an example of a change to the external threat landscape?

The correct answer is C. A commonly used encryption algorithm has been compromised.. The external threat landscape refers to threats originating outside the organization - from attackers, adversarial capabilities, and the broader security environment. A compromised encryption algorithm is an external event that changes what attackers are capable of (cryptographic

Submitted by devops_kid· Apr 18, 2026Information Security Risk Management

Question

Options

AThe organization has been purchased by another entity.
BThe information security program has been outsourced.
CA commonly used encryption algorithm has been compromised.
DIndustry security standards have been modified.

How the community answered

(38 responses)

A
3% (1)
B
5% (2)
C
89% (34)
D
3% (1)

Explanation

The external threat landscape refers to threats originating outside the organization - from attackers, adversarial capabilities, and the broader security environment. A compromised encryption algorithm is an external event that changes what attackers are capable of (cryptographic attacks now become feasible), directly altering the external threat environment. Option A (acquisition) is an internal organizational change. Option B (outsourcing the security program) is an internal operational decision. Option D (modified industry standards) reflects changes in compliance or best practice guidance, not a direct change in the threat landscape.

Topics

#External Threats#Threat Landscape#Risk Identification#Cryptographic Vulnerabilities

Community Discussion

No community discussion yet for this question.

Full CISM Practice