(Choose 1 answer)
It is important to choose the right risk analysis methodology to meet the goals of the organization's needs. Which of the following best describes when the risk management standard AS/NZS 4360 should be used?
A. When a qualitative method is needed to prove the compliance levels as they pertain to regulations
B. When there is a need to assess items of an organization that are not just restricted to information security
C. When a qualitative method is needed to prove the compliance levels as they pertain to law
D. When there is a need to assess items of an organization that are directly related to information security
