Q37
Single choice
When a CISO considers delaying or not remediating system vulnerabilities which of the following are MOST important to take into account?