CompTIA Security+ (SY0-701) SY0-701 — Question 133

Which of the following would help ensure a security analyst is able to accurately measure the overall risk to an organization when a new vulnerability is disclosed?