A risk manager has decided to use likelihood and consequence to determine the risk of an event occurring to a
company asset. Which of the following is a limitation of this approach to risk management?

A.
Subjective and based on an individual’s experience.

B.
Requires a high degree of upfront work to gather environment details.

C.
Difficult to differentiate between high, medium, and low risks.

D.
Allows for cost and benefit analysis.

E.
Calculations can be extremely complex to manage.