Risk assessment is not always met with open arms by management for all of the following reasons except:
A.
Ignorance
B.
Over-confidence
C.
Fear
D.
Due care and due diligence
Explanation:
Due care and due diligence are actually reasons to perform risk assessment.
Unfortunately, many companies are reluctant to dedicate time and energy toward risk
assessment. Sometimes they are simply ignorant of the pitfalls that exist and the
potential harm that could be realized. Other times, they are arrogant and
over-confident with their current protection schemes. And finally, there may be some
fear of what they may find if they start digging around.
The wording of this question is a bit tricky, which is representative of what you
might see on the CISSP exam.