External digital risks are typically outside your control and require what?

• A. No proactive measures
• B. Proactive measures to protect against them
• C. Internal policy changes
• D. Employee morale

Answer: (B)

External digital risks come from outside the organization, so you can’t count on control over the source. The way to handle them is to implement proactive measures that reduce both the likelihood and impact of threats before they occur. This includes technical protections like patching and MFA, encryption, regular backups, and robust incident response planning, plus governance such as vendor risk management and threat intelligence, and training to help people spot phishing and other scams. Internal policy changes can help, but they aren’t sufficient by themselves to counter external threats. Employee morale doesn’t directly reduce risk, so it isn’t the main lever to rely on.