During a risk analysis a system administrator mentions that due to the lack of communication
between Human recourses management (HRM) and system administrators, employees can still
access the company server from home even if they are no longer employed by the company.
Which characteristic of a risk is missing here?

A.
Business impact

B.
Security control

C.
Threat agent

D.
Vulnerability

Explanation: