The threat assessment team has been asked to identify critical threats to the organization. Which of the following is the best strategy to use?

• A. Bring together a team of subject matter experts to brainstorm the unknown unknowns.
• B. Use the organization's risk assessment to categorize and prioritize assets and resources which could be attacked.
• C. Use threat intelligence to Identify known attackers and the likelihood of their interest in attacking the organization.
• D. Identify organizational assets and threats to those assets then prioritize threats according to potential impact.

Answer: (D)