A.viruses always have new variants.
B. Risk assessment can't always find all the problems.
C. Complexity and variability of information systems
D. Diversity and variability of threat sources
Reference answer: c, d