Overall business risk for a particular threat can be expressed as:
A、a product of the probability and magnitude of the impact if a threat successfully exploits a vulnerability.
B、the magnitude of the impact should a threat source successfully exploit the vulnerability.
C、the likelihood of a given threat source exploiting a given vulnerability.
D、the collective judgment of the risk assessment team.