Question $1$

An information technology $($IT$)$ manager is trying to persuade the chief financial officer $($CFO$)$

to sign off on a new support and update contract for the company's virtualized environment.

The CFO sees this as a waste of money since the company already has the environment up

and running. The IT manager explained to the CFO that the company will no longer receive

security updates to protect the environment. What describes the level of hazard posed by

NOT keeping the systems up$-$to$-$date?

Vulnerability

Threat

Risk

Insider threat