Certified Information Security Manager (CISM) — Question 1007

Which of the following presents the GREATEST challenge when assessing the impact of emerging risk?

Answer options

• A. Outdated risk management strategy
• B. Insufficient data related to the emerging risk
• C. Complexity of the emerging risk
• D. Lack of resources to perform risk assessments

Correct answer: B

Explanation

The correct answer is B because having insufficient data makes it extremely difficult to accurately assess and understand the potential impact of an emerging risk. While outdated strategies, complexity, and lack of resources can hinder the process, the absence of adequate data poses the most significant challenge in effective risk evaluation.