Answer:
A. determining the likelihood that vulnerable system will be attacked by specific threats.
Explanation:
When carrying out risk management, it is important to first identify the risks, and then to assess and prioritize the risks in order of likely occurrence, and the find ways to reduce them.
In the risk identification stage, it is important to determine what systems are vulnerable and how likely they are to be attacked by specific threats.
