Which quantifiable item should you consider when your organization adopts new technologies?

Which quantifiable item should you consider when your organization adopts new technologies?
A. exploits
B. risk
C. threats
D. vulnerability