Watch this video on YouTube
In a bid to align its security posture with strategic objectives, a firm is outlining its risk profile. From the following methods, which would offer the CLEAREST representation of the goals within this risk profile?