Andrew, an incident responder, is performing risk assessment of the client organization. As a part of the risk assessment process, he identified the boundaries of the IT systems, along with the resources and the information that constitute the systems.

Andrew, an incident responder, is performing risk assessment of the client organization. As a part of the risk assessment process, he identified the boundaries of the IT systems, along with the resources and the information that constitute the systems.

Identify the risk assessment step Andrew is performing.
A . Likelihood determination
B . System characterization
C . Control analysis
D . Control recommendations

Answer: B