Which two of the following are factors that must be considered in determining the likelihood of
occurrence during a risk analysis review?

A.
What are the methods available to attack this asset?

B.
What are the costs associated with protecting this asset?

C.
Does the threat have sufficient capability to exercise the attack?

D.
Does the threat have the motivation or incentive to exercise the attack?

E.
Are any of the assets worthy of an attack?