Which of the following is a benefit of including a risk management framework into an organization's security
approach?


A. It defines expected service levels from participating supply chain partners to ensure system outages are
remediated in a timely manner.

B. It identifies specific vendor products that have been tested and approved for use in a secure environment.
C. It provides legal assurances and remedies in the event a data breach occurs.
D. It incorporates control, development, policy, and management activities into IT operations.