Company XYZ has employed a consultant to perform a controls assessment of the HR system,
backend business operations, and the SCADA system used in the factory. Which of the following
correctly states the risk management options that the consultant should use during the
assessment?

A.
Risk reduction, risk sharing, risk retention, and risk acceptance.

B.
Avoid, transfer, mitigate, and accept.

C.
Risk likelihood, asset value, and threat level.

D.
Calculate risk by determining technical likelihood and potential business impact.