Overall business risk for a particular threat can be expressed as: 
A、a product of the probability and magnitude of the impact if a threat successfully exploits a vulnerability. 
B、the magnitude of the impact should a threat source successfully exploit the vulnerability. 
C、the likelihood of a given threat source exploiting a given vulnerability. 
D、the collective judgment of the risk assessment team.