Which of the following statements clearly describes the main motive of risk management? option A Reducing all risk regardless of cost option B Reducing the risk to a tolerable level option C Prosecuting any employees that are violating published security policies option D Transferring the risks to external third parties