Question 343:
Which of the following is the MOST important prerequisite to performing an information security risk assessment?
Answer options:
A. Classifying assets B. Determining risk tolerance C. Reviewing the business impact analysis D. Assessing threats and vulnerabilities