Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
D. Threat modeling. The best way to identify changes to the risk landscape is through "D. Threat modeling." Threat modeling involves systematically analyzing an application, system, or environment to identify potential threats, vulnerabilities, and risks. This process helps to uncover new risks or changes in the risk landscape as systems evolve or new technologies are introduced. While the other options (access reviews, root cause analysis, internal audit reports) can provide valuable information for risk management, threat modeling is specifically designed to identify and evaluate changes in the risk landscape by examining potential threats and vulnerabilities that might not have been previously considered.
Agree, the best among other options
The BEST way to identify changes to the risk landscape would be through threat modeling. Threat modeling is a structured approach to identifying potential threats, vulnerabilities, and countermeasures associated with a system, process, or application. It involves creating models that describe the system, identifying the assets and data involved, and then analyzing potential threats and vulnerabilities to those assets and data. This allows organizations to identify changes to the risk landscape and take appropriate actions to mitigate risks.