Which of the following is an example of a change to the external threat landscape?

A. Organizational security standards have been modified.
B. A commonly used encryption algorithm has been compromised.
C. New legislation has been enacted in a region where the organization does business.
D. Infrastructure changes to the organization have been implemented.