Which risk domain(s) is a concern when end users independently leverage the public cloud outside the

Which risk domain(s) is a concern when end users independently leverage the public cloud
outside the management of corporate IT?

A.
FIPS-140 enforcement

B.
Accessibility and Ease of use

C.
Non-repudiation

D.
Availability and Control