Question 400:
When determining which control deficiencies are most significant, which of the following would provide the MOST useful information?
Answer options:
A. Exception handling policy B. Benchmarking assessments C. Vulnerability assessment results D. Risk analysis results