During a disaster recovery planning session, a security administrator has been tasked with
determining which threats and vulnerabilities pose a risk to the organization. Which of the following
should the administrator rate as having the HIGHEST frequency of risk to the organization?

A.
Hostile takeovers

B.
Large scale natural disasters

C.
Malware and viruses

D.
Corporate espionage