15 The aim of the risk management deployment process is to maximize what? a. The extent of areas where the organization has some control over the outcome b. The amount of effort put into such things as penetration tests c. The number of meetings between upper managers to discuss strategy d. The investment in access control mechanisms and other forms of control