Câu 298: Isaca Certified in Risk and Information Systems Control

Which of the following is the PRIMARY reason to perform ongoing risk assessments?

1. A. The risk environment is subject to change. — đáp án hiện tại
2. B. The information security budget must be justified.
3. C. Emerging risk must be continuously reported to management.
4. D. New system vulnerabilities emerge at frequent intervals.