You are the security manager for an organization that uses the cloud for its production environment. According to your contract with the cloud provider, your organization is responsible for patching. A new patch is issued by one of your vendors. You decide not to apply it immediately for fear of interoperability problems. What additional risk are you

$17$

accepting?

A$.$ The cloud provider will suspend your access for violating its terms of service.

B$.$ The cloud provider may sue your organization for breach of contract.

C$.$ Your organization is subject to the vulnerability the patch addresses. Your end clients will no longer trust your organization, and this will hurt your revenue flow.