Which of the following statements about IS risks is NOT true? Select the incorrect statement. If multiple statements are incorrect, select only the answer that contains all incorrect answers.

a. Ransomware is malicious software used to extort organisations or individuals under threat of publishing sensitive data or blocking access to an information system.

b. Third Party Risks refer to the ability of a third party to infiltrate an organisation's system by compromising an outside partner or service provider with access to the systems and data.

c. Phishing refers to malicious email communication impersonating a trusted party.

d. Social Engineering refers to software that exploits weaknesses in an information system by pretending to be a regular user.

e. All of the statements (a, b, c, and d) are true.