Which method would you use to develop risk profiles for a firm's information system projects and assets?

A$)$ TCO

B$)$ Portfolio analysis

C$)$ Scoring model

D$)$ Information systems plan

E$)$ Real options model