In the Context of General Security Risk Assessment,which of the Following

Multiple Choice

In the context of general security risk assessment,which of the following is true of the concept of reasonable assurance?

A) It decides whether or not to implement a particular countermeasure against attacks.
B) It recognizes that managers must use their judgment to ensure that the cost of control does not exceed a system's benefits.
C) It recognizes the loss events or the risks or threats that could occur,such as a distributed denial-of-service attack or insider fraud.
D) It determines the impact of each threat occurrence.