Following a successful and well-publicized hacking incident, an organization has plans to improve application security. Which of the following is a security project risk?

A. Critical evidence may be lost.
B. The reputation of the organization may be damaged.
C. A trapdoor may have been installed in the application.
D. Resources may not be available to support the implementation.