Which of the following governing factors should be considered to derive an overall likelihood rating that is used to specify the probability that a potential vulnerability may be exercised within the construct of the associated threat environment?
Each correct answer represents a complete solution. Choose three.
A.
Threat-source motivation and capability
B.
Detect a problem and determine its cause
C.
Nature of the vulnerability
D.
Existence and effectiveness of current controls