CISSP Information Systems Security

Answer: C - Risks cause vulnerabilities that can lead to threats and exposures. Risk is the likelihood of a threat taking advantage of vulnerability and the corresponding business impact. A risk ties the vulnerability, threat, and likelihood of exploitation to the resulting business impact. A countermeasure or safeguard is put into place to mitigate the potential risk