An internal review reveals an out-of-support human resources system. Which of the following is MOST important to determine when evaluating the associated risk? 

Answer options:

A. Frequency of outages associated with the out-of-support system
B. The number of people accessing the out-of-support system
C. Exposure of the out-of-support system outside of the network
D. Timeline to replace the out-of-support system

D