A good risk management strategy should have all of the following, except which one? Question 23 options: a methodology that evolves with emerging threats a goal of eliminating all risks a "control gap" analysis security control measures that are preventive and detective a goal of achieving an acceptable level of risk