Which of the following should be determined while defining risk management strategies?
Organizational objectives and risk tolerance
Risk assessment criteria
IT architecture complexity
Enterprise disaster recovery plans
Submit