Which impacts may be relevant when expressing a cybersecurity gap as an enterprise risk? Select ALL correct answers.

### Why this is right - **Business mission**: a risk may affect whether the organization can achieve its purpose. - **Operations and services**: a weakness may disrupt everyday work or service delivery. - **Privacy**: an incident or control gap may affect personal information. - **Assets**: systems and data may be damaged, exposed, or made unavailable. - **Reputation**: a security failure can undermine confidence in the organization. ### The concept The source directs assessors to express gaps in terms of business consequences, rather than treating technical compliance as the only measure. These impacts help decision-makers judge severity and determine whether to mitigate or accept a risk. ### The other options - **F. The color scheme of the assessment spreadsheet**: presentation can aid readability, but it is not a stated category of enterprise risk impact. ### Terms - **Privacy**: protection and appropriate handling of information about people. - **Reputation**: the trust and standing an organization has with stakeholders. ### Remember Explain the effect on the organization, not merely the format of the assessment.