Answer:
The answer is "Option b".
Step-by-step explanation:
In information security, the risk is also known as the capacity to take advantage of the vulnerabilities and the resource or group of assets, that harm the organization is described.
- In the calculation of the total risk the three things is used that are "Threat, Vulnerability, and Asset".
- These values are multiplied by each other, that's why except of "option b" all other choices are wrong.