Why is there a need for a full risk assessment if a quick risk assessment has already been performed?
A. A full assessment can help find operational exposures after implementation
B. A full assessment is usually conducted by a third party to get an unbiased version of the risk profile
C. A full assessment details all the exposures in high value/high risk assets
D. A full assessment is always executed by internal auditing