Multiple choice. Please give a brief explanation for your answer.

As a CIO you want to calculate risk and select controls to protect a new system. You have identified people, environmental conditions, and events that could affect the new system. Which of the following do you need to estimate NEXT in order to complete your risk calculations?

A) Risks

B) Likelihood

C) Vulnerabilities

D) Threats