Isabelle is a security professional. Her organization is considering a major network upgrade, which could result in the network being down occasionally while new features go live. She is evaluating how much risk her organization is willing to accept to achieve its goal. She is determining the impact on the organization versus the likelihood of a network outage. Which of the following is she attempting to determine? a. Availability
b. Risk appetite
c. Risk tolerance attempting to determine who wrote the code in question.
d. Compliance with internal policies