An organization develops and delivers a range of digital products and services. Which is the BEST approach to addressing the risks related to digital technology?

Question

Options

• AFocusing on protecting the assets inside the organization
• BAccepting extra work and investing in large projects
• CReducing the use of digital technology
• DTaking small, calculated risks that do not have a large impact

• A
  3% (1)
• B
  11% (4)
• C
  5% (2)
• D
  81% (30)

Explanation

Taking small, calculated risks (D) reflects modern digital risk management best practices - organizations that develop digital products must experiment, iterate, and accept manageable risks to innovate effectively, rather than trying to eliminate risk entirely. A is wrong because digital threats now extend well beyond organizational boundaries (supply chains, APIs, third-party services), so an inside-only focus leaves major attack surfaces unaddressed. B is wrong because large, slow projects increase exposure and often fail to adapt to rapidly evolving digital threats - agility beats scale. C is wrong because reducing digital technology contradicts the organization's core mission of delivering digital products and services, making it counterproductive.

Memory tip: Think of the "calculated risk" approach like crossing a street - you don't avoid all roads (C), build a tunnel (B), or only protect your house (A); you look both ways and take small, informed steps (D).

No community discussion yet for this question.