A company adds connected devices and a remote-access service. What is the most direct strategic implication?

### Why this is right Connected devices and remote services create additional systems and routes that may be exposed to attackers. The organization should reassess how these changes affect its threat surface and risks. ### The concept The threat surface is the set of systems, services, information, and processes an attacker could use or target. Adding technology can expand that set, though the exact risk depends on how the technology is configured and used. Reassessment helps ensure that strategy and controls reflect the changed environment. ### The other options - **Its risks disappear because the devices are modern**: newer technology can still have weaknesses or be exposed. - **Threat modeling is no longer useful**: new components create new relationships and possible attack paths to examine. - **Only the company's physical offices need protection**: remote access and connected devices extend beyond the office. ### Terms - **Cyber threat surface**: The systems, services, information, and processes that can be used or targeted in an attack. - **Remote access**: Access to organizational systems from outside the organization's usual local environment. ### Remember A technology change can change the threat surface.