CompTIA Security+ (SY0-701) SY0-701 — Question 121

A company is required to perform a risk assessment on an annual basis. Which of the following types of risk assessments does this requirement describe?