The organization can perform risk determination using certain risk elements, including all but which of the following?

A. legacy cost of recovery
B. impact (consequence)
C. likelihood of threat event (attack)
D. element of uncertainty

Answer: A