Which of the following is an example of a change to the external threat landscape?

A. Infrastructure changes to the organization have been implemented
B. Organizational security standards have been modified
C. A commonly used encryption algorithm has been compromised
D. New legislation has been enacted in a region where the organization does business