Why might you need to verify risk elements if a substantial amount of time has passed since you performed a risk assessment?

To ensure compliance with regulations and laws that affect your organization

To make sure that the threats or vulnerabilities you want to mitigate still exist

To protect servers and databases

To maximize the cost$-$effectiveness of your mitigation plan