CRISC · Question #398
A risk practitioner is performing a risk assessment of recent external advancements in quantum computing. Which of the following would pose the GREATEST concern for the risk practitioner?
The correct answer is B. The organization has not reviewed its encryption standards. Advancements in quantum computing pose the greatest concern for organizations that have not reviewed their encryption standards, as current widely used cryptographic algorithms are vulnerable to attack by sufficiently powerful quantum computers.
Question
A risk practitioner is performing a risk assessment of recent external advancements in quantum computing. Which of the following would pose the GREATEST concern for the risk practitioner?
Options
- AThe organization has incorporated blockchain technology in its operations.
- BThe organization has not reviewed its encryption standards.
- CThe organization has implemented heuristics on its network firewall.
- DThe organization has not adopted Infrastructure as a Service (laaS) for its operations.
How the community answered
(14 responses)- A7% (1)
- B57% (8)
- C7% (1)
- D29% (4)
Why each option
Advancements in quantum computing pose the greatest concern for organizations that have not reviewed their encryption standards, as current widely used cryptographic algorithms are vulnerable to attack by sufficiently powerful quantum computers.
While blockchain technology often uses cryptographic principles, its core distributed ledger mechanism is less directly threatened by quantum computing in the same way as traditional encryption keys, and there are quantum-resistant blockchain solutions emerging.
Recent advancements in quantum computing pose a significant threat to many currently used asymmetric and symmetric encryption algorithms, which form the backbone of modern data security. If an organization has not reviewed or updated its encryption standards in light of post-quantum cryptography research, its data could be at severe risk of compromise by a future quantum computer.
Heuristics on a network firewall primarily deal with anomaly detection and behavioral analysis, which are generally not directly impacted by advancements in quantum computing that target cryptographic algorithms.
The adoption of IaaS is a deployment model and does not inherently make an organization more or less vulnerable to quantum computing threats compared to its internal encryption practices.
Concept tested: Quantum computing threat to cryptography
Source: https://csrc.nist.gov/projects/post-quantum-cryptography
Topics
Community Discussion
No community discussion yet for this question.