A government agency is tasked with developing a plan for critical infrastructure protection. The agency recognizes the need to consider a wide range of known and unknown threats, as well as the potential for low$-$probability, high$-$impact events.

Which of the following approaches best aligns with the Rumsfeld Matrix in addressing the diverse range of threats and uncertainties associated with critical infrastructure protection?

Embracing a proactive risk management strategy that emphasizes adaptability and resilience in the face of uncertain threats.

Adopting a risk$-$averse approach and focusing on preventing all potential threats, known and unknown.

Prioritizing known threats and implementing preventive measures while acknowledging the existence of unknown unknowns.

Relying solely on historical data and established risk assessment methodologies to identify and address potentrial threats.