What is the risk management approach to critical infrastructure protection?

• A. Eliminate all threats completely before proceeding.
• B. Focus solely on cyber threats while ignoring physical risks.
• C. Identify threats and vulnerabilities, assess risk, implement protective measures, and ensure continuity and response planning.
• D. Rely exclusively on private sector risk assessments.

Answer: (C)