Isaca CISM Exam - Topic 6 Question 89 Discussion

Actual exam question for Isaca's CISM exam

Question #: 89
Topic #: 6

[All CISM Questions]

When analyzing the emerging risk and threat landscape, an information security manager should FIRST:

Adetermine the impact if threats materialize.

Bdetermine the sources of emerging threats.

Creview historical threats within the industry.

Dmap threats to business assets.

Show Suggested Answer

Suggested Answer: B

by Pamella at Nov 16, 2024, 05:17 PM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Azalee

6 months ago

Mapping threats to business assets is key for effective risk management.

upvoted 0 times

...

Carlee

6 months ago

Surprised that people think sources are first! Isn't impact more important?

upvoted 0 times

...

Garry

6 months ago

But what about reviewing historical threats? That could provide context.

upvoted 0 times

...

Jeannetta

7 months ago

Totally agree, understanding the sources helps prioritize.

upvoted 0 times

...

Lindsay

7 months ago

I think it's crucial to determine the sources of emerging threats first.

upvoted 0 times

...

Mignon

7 months ago

I recall that understanding the impact if threats materialize is essential, but I wonder if we should really start with identifying the sources instead.

upvoted 0 times

...

Glory

7 months ago

Reviewing historical threats could help, but I feel like we need to focus on current threats first. Maybe determining the impact is more crucial?

upvoted 0 times

...

Ranee

7 months ago

I'm not entirely sure, but I remember a practice question that emphasized mapping threats to business assets first. That might be important too.

upvoted 0 times

...

Anglea

8 months ago

I think we should start by determining the sources of emerging threats. It seems like a logical first step to understand what we're up against.

upvoted 0 times

...

Jess

8 months ago

I've got this! Determining the sources of emerging threats is the logical first step. That will help me identify the most pressing risks to address.

upvoted 0 times

...

Yuonne

8 months ago

Reviewing historical threats within the industry could provide valuable context, but I think the key is to first understand how the threats might affect the organization's core operations and data.

upvoted 0 times

...

Elliot

8 months ago

Hmm, I'm a bit unsure here. Should I focus on the sources of emerging threats first, or try to determine the impact? I'll have to think this through carefully.

upvoted 0 times

...

Kristel

8 months ago

This seems like a straightforward question about risk assessment. I'd start by mapping the threats to the organization's critical business assets to understand the potential impact.

upvoted 0 times

...

Jolene

1 year ago

B) Threat sources? Isn't that just the Dark Web, hackers, and that guy in his mom's basement? Time to call the Cyber Police!

upvoted 0 times

Shaniqua

1 year ago

A) Yes, determining the impact of threats materializing helps prioritize risk management efforts.

upvoted 0 times

...

Jani

1 year ago

D) Mapping threats to business assets is crucial in understanding the potential impact on the organization.

upvoted 0 times

...

Farrah

1 year ago

B) Threat sources are not just limited to the Dark Web and hackers. There are various other sources to consider.

upvoted 0 times

...

Hyun

1 year ago

A) determine the impact if threats materialize.

upvoted 0 times

...

Royal

1 year ago

Michael

upvoted 0 times

Erinn

1 year ago

B) determine the sources of emerging threats.

upvoted 0 times

...

Erinn

1 year ago

A) determine the impact if threats materialize.

upvoted 0 times

...

Jackie

1 year ago

C) Reviewing historical threats is so boring, but it's probably the most practical approach. You can't fix what you don't understand, right?

upvoted 0 times

...

Billy

1 year ago

D) Mapping threats to business assets sounds like a no-brainer to me. Gotta protect the crown jewels, ya know?

upvoted 0 times

Cecily

1 year ago

D) Mapping threats to business assets is crucial for protection.

upvoted 0 times

...

Vivan

1 year ago

C) review historical threats within the industry.

upvoted 0 times

...

Hershel

1 year ago

B) determine the sources of emerging threats.

upvoted 0 times

...

Phyliss

1 year ago

A) determine the impact if threats materialize.

upvoted 0 times

...

Avery

2 years ago

I think mapping threats to business assets should be the first step, as it helps prioritize the risks.

upvoted 0 times

...

Nathalie

2 years ago

I agree with Sylvie. It's important to understand the potential consequences first.

upvoted 0 times

...

Mignon

2 years ago

B) Definitely gotta know where those threats are coming from first. Can't put the fire out if you don't know the source, amirite?

upvoted 0 times

Sherell

1 year ago

C) review historical threats within the industry.

upvoted 0 times

...

Kyoko

1 year ago

D) map threats to business assets.

upvoted 0 times

...

Edmond

1 year ago

B) Definitely gotta know where those threats are coming from first. Can't put the fire out if you don't know the source, amirite?

upvoted 0 times

...

Tawanna

1 year ago

A) determine the impact if threats materialize.

upvoted 0 times

...

Sylvie

2 years ago

I think the first step should be to determine the impact if threats materialize.

upvoted 0 times

...