You have just recently finished a complete Risk Analysis of your organization. During your
presentation you present the controls you feel must be implemented. Which is considered to be
the major factor in determining a specific control system to implement?

A.
Control system documentation

B.
Return on investment

C.
Current system availability

D.
Familiarity with the system

E.
Staffs previous use of system