Which of the following international standards can be BEST used to define a Risk Management process in an organization?
A . National Institute for Standards and Technology 800-50 (NIST 800-50)
B . International Organization for Standardizations C 27005 (ISO-27005)
C . Payment Card Industry Data Security Standards (PCI-DSS)
D . International Organization for Standardizations C 27004 (ISO-27004)