Explain a cyber risk taxonomy used to categorize controls and risk levels and how it informs audit priorities.

• A. Classification by department and seniority.
• B. Ignore privacy considerations.
• C. Confidentiality, integrity, availability, and privacy with likelihood/impact scores.
• D. Only financial impact.

Answer: (C)