When analyzing the emerging risk and threat landscape, an information security manager should first map threats to business assets. This helps ensure that the analysis is focused on understanding how emerging threats could impact the organization's critical assets, enabling a more targeted and relevant risk management approach.