Valdis is on a team responsible for assessing the level of risk the company can accept for a given type of threat as well as the total risk the company can bear for a given risk posture. To succeed, which of the following best describes what they need to determine? Select two.

a$.$

Risk mitigation strategy

b$.$

Possible risk exemptions

c$.$

Their risk acceptance

d$.$

Possible risk exceptions

e$.$

Their risk appetite

f$.$

Their risk tolerance