Which of the Following Statements Is True Regarding Risk Management

Multiple Choice

Which of the following statements is true regarding risk management and vulnerability management?

A) They both have the objective of reducing the likelihood that detrimental events occur.
B) Risk management is often conducted using an IT asset-based approach.
C) Vulnerability management is more complex and strategic.
D) Both approaches involve processes that typically take many months or years to complete.