From a risk management perspective, which of the following is MOST important to be tracked in continuous monitoring?

A. Number of prevented attacks
B. Changes in the threat environment
C. Changes in user privileges
D. Number of failed logins