Discuss Isaca CISM Exam Topic 6 Question 89

When analyzing the emerging risk and threat landscape, an information security manager should FIRST:

Adetermine the impact if threats materialize.

Bdetermine the sources of emerging threats.

Creview historical threats within the industry.

Dmap threats to business assets.

Suggested Answer: B

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

35 comments · newest first

Azalee 10 months ago

Mapping threats to business assets is key for effective risk management.

Carlee 11 months ago

Surprised that people think sources are first! Isn't impact more important?

Garry 11 months ago

But what about reviewing historical threats? That could provide context.

Jeannetta 11 months ago

Totally agree, understanding the sources helps prioritize.

Lindsay 11 months ago

I think it's crucial to determine the sources of emerging threats first.

Mignon 12 months ago

I recall that understanding the impact if threats materialize is essential, but I wonder if we should really start with identifying the sources instead.

Glory 12 months ago

Reviewing historical threats could help, but I feel like we need to focus on current threats first. Maybe determining the impact is more crucial?

Ranee 12 months ago

I'm not entirely sure, but I remember a practice question that emphasized mapping threats to business assets first. That might be important too.

Anglea 1 year ago

I think we should start by determining the sources of emerging threats. It seems like a logical first step to understand what we're up against.

Jess 1 year ago

I've got this! Determining the sources of emerging threats is the logical first step. That will help me identify the most pressing risks to address.

Yuonne 1 year ago

Reviewing historical threats within the industry could provide valuable context, but I think the key is to first understand how the threats might affect the organization's core operations and data.

Elliot 1 year ago

Hmm, I'm a bit unsure here. Should I focus on the sources of emerging threats first, or try to determine the impact? I'll have to think this through carefully.

Kristel 1 year ago

This seems like a straightforward question about risk assessment. I'd start by mapping the threats to the organization's critical business assets to understand the potential impact.

Jolene 2 years ago

B) Threat sources? Isn't that just the Dark Web, hackers, and that guy in his mom's basement? Time to call the Cyber Police!

Shaniqua 2 years ago

↳ replying to Jolene

A) Yes, determining the impact of threats materializing helps prioritize risk management efforts.

Jani 2 years ago

↳ replying to Jolene

D) Mapping threats to business assets is crucial in understanding the potential impact on the organization.

Farrah 2 years ago

↳ replying to Jolene

B) Threat sources are not just limited to the Dark Web and hackers. There are various other sources to consider.

Hyun 2 years ago

↳ replying to Jolene

A) determine the impact if threats materialize.

Royal 2 years ago

Michael

Erinn 2 years ago

↳ replying to Royal

B) determine the sources of emerging threats.

Erinn 2 years ago

↳ replying to Royal

A) determine the impact if threats materialize.

Jackie 2 years ago

C) Reviewing historical threats is so boring, but it's probably the most practical approach. You can't fix what you don't understand, right?

Billy 2 years ago

D) Mapping threats to business assets sounds like a no-brainer to me. Gotta protect the crown jewels, ya know?

Cecily 2 years ago

↳ replying to Billy

D) Mapping threats to business assets is crucial for protection.

Vivan 2 years ago

↳ replying to Billy

C) review historical threats within the industry.

Hershel 2 years ago

↳ replying to Billy

B) determine the sources of emerging threats.

Phyliss 2 years ago

↳ replying to Billy

A) determine the impact if threats materialize.

Avery 2 years ago

I think mapping threats to business assets should be the first step, as it helps prioritize the risks.

Nathalie 2 years ago

I agree with Sylvie. It's important to understand the potential consequences first.

Mignon 2 years ago

B) Definitely gotta know where those threats are coming from first. Can't put the fire out if you don't know the source, amirite?

Sherell 2 years ago

↳ replying to Mignon

C) review historical threats within the industry.

Kyoko 2 years ago

↳ replying to Mignon

D) map threats to business assets.

Edmond 2 years ago

↳ replying to Mignon

B) Definitely gotta know where those threats are coming from first. Can't put the fire out if you don't know the source, amirite?

Tawanna 2 years ago

↳ replying to Mignon

A) determine the impact if threats materialize.

Sylvie 2 years ago

I think the first step should be to determine the impact if threats materialize.

Isaca CISM Exam - Topic 6 Question 89 Discussion