When assessing potential risks, a company's security team must prioritize which risks to address first. Which criterion should they use to assess the risks that may require immediate attention in developing their mitigation strategies?
Reviewing the historical time between successful incidents of specific natures.
Tracking the number of software updates and patches released per week.
Assessing the security features of the latest technologies implemented.
Evaluating how often a given security incident could occur within a year.