Subscribing to external threat intelligence sources is the best way for an information security manager to identify emerging risks. These sources provide timely and relevant information about new threats, vulnerabilities, and attack techniques that may affect the organization, allowing for proactive risk management and response.