Which one of the following statements is correct regarding an organization's cyber risk exposure? Available answer options Select only one option A Because the consequences of cyber risk is unknown, insurance is the best risk treatment option for a risk manager. B Cyber risk loss exposures are most effectively treated as part of an organization's enterprise risk management efforts. C The preferred way for an organization to identify its cyber risk loss exposures is with a bottom-up approach. D When scanning its environment for cyber risk loss exposures, an organization should concentrate mainly on its external environment