Watch this video on YouTube
Which of the following would be MOST helpful to an information security management team when allocating resources to mitigate exposures?