Which of the following statements about cybersecurity risk management is most accurate?


To mitigate risk from known vulnerabilities


To protect IT and data from unauthorized access, to maintain awareness of cyber threats, to detect anomalies, and to mitigate the impact of incidents


To protect IT and data from cyber attack


To mitigate risk from unknown vulnerabilities