CompTIA Security+ (SY0-701) SY0-701 — Question 74

A company decided to reduce the cost of its annual cyber insurance policy by removing the coverage for ransomware attacks. Which of the following analysis elements did the company most likely use in making this decision?