Jane, a security architect, is implementing security controls throughout her organization. Which of
the following BEST explains the vulnerability in the formula that a Risk = Threat x Vulnerability x
Impact?

A.
Vulnerability is related to the risk that an event will take place.

B.
Vulnerability is related to value of potential loss.

C.
Vulnerability is related to the probability that a control will fail.

D.
Vulnerability is related to the probability of the event.