Jane, a security architect, is implementing security controls throughout her organization. Which of
the following BEST explains the vulnerability in the formula that a Risk = Threat x Vulnerability x
Impact?
A.
Vulnerability is related to the risk that an event will take place.
B.
Vulnerability is related to value of potential loss.
C.
Vulnerability is related to the probability that a control will fail.
D.
Vulnerability is related to the probability of the event.