Which statement best describes why cyber risk is unique?

• A. Static and easily predicted.
• B. Adversarial and adaptive.
• C. Purely technical with no governance impact.
• D. Only affects consumer data.

Answer: (B)

Cyber risk is unique because it comes from adversaries who actively target organizations and continually adapt their methods in response to defenses. The threat landscape changes as attackers discover new vulnerabilities, refine exploits, and shift tactics to bypass controls, so risk is dynamic rather than fixed. This adversarial and adaptive nature means effective risk management requires ongoing threat intelligence, flexible controls, and governance that can adjust to new techniques and scenarios. It also shows that cyber risk isn’t just a technical issue or limited to a single data type; it involves people, processes, and organizational governance, and can affect operations, supply chains, and reputation. The other statements suggest a static, purely technical view or a narrow data focus, which don’t reflect how evolving, intent-driven threats shape cyber risk.