CompTIA Security+ (SY0-701) SY0-701 — Question 458

A company is performing a risk assessment on new software the company plans to use. Which of the following should the company assess during this process?