Which of the following are examples of opportunity?

• A. Weak security controls
• B. Insufficient oversight from management
• C. An unlocked safe
• D. All of the above

Answer: (D)

Opportunity is about conditions that let a threat exploit a vulnerability. When security controls are weak, there’s less friction for an attacker to act. When management oversight is insufficient, there’s less monitoring and enforcement, increasing the chance that risks go unchecked. An unlocked safe is a clear, tangible condition that makes access trivial. Put together, these scenarios all create opportunities for misuse or theft. That’s why all of the above are examples, and why the best approach to reduce risk is to close these gaps—strengthen controls, improve oversight, and secure physical assets.