An organization's information security team presented the risk register at a recent information security steering committee meeting. Which of the following shou...