When a security standard conflicts with a business obje…

When a security standard conflicts with a business objective, the situation should be resolved by:

A.
changing the security standard.

B.
changing the business objective.

C.
performing a risk analysis.

D.
authorizing a risk acceptance.