An updated report from a trusted research organization shows that attacks have increased in the...

New threat intelligence primarily impacts thefrequency componentof risk calculations.

CRISC states:

“When new information about threats is available, it must be incorporated into risk assessment by adjusting threat event frequencies in related scenarios.”

AandDare statistical manipulations, not practical first steps.

Caddresses impact, not likelihood.

Hence,B. Revise the threat frequencyis correct.

CRISC Reference:Domain 2 – IT Risk Assessment, Topic: Incorporating Threat Intelligence.