Emerging Risk and Threat Landscape CISM Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   How can geopolitical tensions contribute to emerging risks for an organization?

   • ABy ensuring that all data remains within the organization's home country
   • BBy guaranteeing lower costs for cloud services
   • CBy disrupting supply chains and access to critical technology
   • DBy eliminating the need for third-party risk management
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   An organization is identifying emerging risks. Which of the following is an example of a societal change that could introduce a new risk?

   • AA shift in customer expectations toward greater data privacy
   • BA change in the organization's internal reporting structure
   • CA new version of a software patch released by a vendor
   • DAn increase in the cost of raw materials due to inflation
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   An organization has identified a new emerging risk related to quantum computing breaking current encryption. How should this be integrated into the risk management framework?

   • AIgnore it because quantum computing is not yet a practical threat
   • BAdd it to the risk register with a long-term mitigation plan for cryptographic agility
   • CImmediately replace all encryption algorithms with quantum-resistant ones
   • DOnly discuss it in security team meetings without formal documentation
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the PRIMARY purpose of communicating emerging risks to stakeholders?

   • ATo satisfy the requirement for public disclosure of all risks
   • BTo guarantee that all stakeholders will agree on the risk response
   • CTo enable informed decision-making and timely risk response
   • DTo shift responsibility for risk management to the stakeholders
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which of the following is a PRIMARY risk implication of adopting Internet of Things (IoT) devices in an organization?

   • AIncreased attack surface due to numerous connected devices with varying security controls
   • BComplete removal of human error from security processes
   • CGuaranteed reduction in operational costs
   • DElimination of the need for network segmentation
   Reveal Solution Discussion Select an answer first