Which of the following principles best describe the focus of a strategic risk assessment? (Choose two.)

A.
Impact of failure of the business.

B.
Procedures to reduce possibility of error or failure.

C.
Fault tolerant and resilient IT systems and networks.

D.
Likelihood that a disaster or other serious incident will occur.

E.
Threats and vulnerabilities that relate differently to various business components.