D is the correct answer. Justification A threat is a potential cause of an unwanted incident. Often, threats cannot be reduced, such as in the case of natural disasters. Designing controls to reduce likelihood (of a threat) addresses only one ...

B is the correct answer. Justification Benchmarking with peers does not help because peers will have different risk environments and cultures that do not directly apply to one's own enterprise. A business case with costs versus benefits provides ...

C. is the correct answer. ------------------------------ Oscar Birungi IT Systems Analysts Manager ------------------------------