Who sets the acceptable risk level for an organization?
A.
Government agencies that create regulations
B.
Senior management
C.
Auditors
D.
Security analyst
Explanation:
The risk level that is acceptable for a specific company will be
defined by senior management.