A Fundamental Difference Between a BIA and Risk Management Is

Multiple Choice

A fundamental difference between a BIA and risk management is that risk management focuses on identifying threats, vulnerabilities, and attacks to determine which controls can protect information, while the BIA assumes __________.

A)  controls have been bypassed
B)  controls have proven ineffective 
C)  controls have failed
D)  All of the above