An organization has decided to implement an Internet of Things (IoT) solution to remain competitive in the market. Which of the following should information security do FIRST?

The correct answer is A. Recalculate risk profile. When introducing new technologies, the first step is to recalculate the risk profile to identify any new or changed risks. "The implementation of new technologies should trigger a review of the risk profile to identify and address new exposures."

Submitted by olafpl· Apr 18, 2026Information Security Risk Management

Question

Options

ARecalculate risk profile
BImplement compensating controls
CReassess risk tolerance levels
DUpdate the security architecture

How the community answered

(30 responses)

A
83% (25)
B
3% (1)
C
10% (3)
D
3% (1)

Explanation

When introducing new technologies, the first step is to recalculate the risk profile to identify any new or changed risks. "The implementation of new technologies should trigger a review of the risk profile to identify and address new exposures."

Topics

#Risk assessment#New technology risk#IoT security#Risk management lifecycle

Community Discussion

No community discussion yet for this question.

Full CISM Practice