Which of the following is the MOST important action for an information security manager upon receiving information about an emerging threat?

The correct answer is C. Conduct a risk assessment.. Upon receiving information about an emerging threat, the most important action for an information security manager is to conduct a risk assessment. This will help evaluate the potential impact of the threat on the organization, determine the likelihood of it affecting critical sy

Submitted by dimitri_ru· Apr 18, 2026Information Security Risk Management

Question

Options

AUpdate the threat and vulnerability inventory.
BPrepare a report for senior management.
CConduct a risk assessment.
DConduct security awareness training.

How the community answered

(21 responses)

A
5% (1)
B
5% (1)
C
76% (16)
D
14% (3)

Explanation

Upon receiving information about an emerging threat, the most important action for an information security manager is to conduct a risk assessment. This will help evaluate the potential impact of the threat on the organization, determine the likelihood of it affecting critical systems, and identify appropriate mitigation strategies. This process ensures that the organization can respond effectively and prioritize actions to address the threat.

Topics

#Emerging threats#Risk assessment process#Security manager responsibilities#Threat response prioritization

Community Discussion

No community discussion yet for this question.

Full CISM Practice