After the implementation of Internet of Things (IoT) devices, new risk scenarios were identified.
What is the PRIMARY reason to report this information to risk owners?
A . To reevaluate continued use of IoT devices.
B . To recommend changes to the IoT policy.
C . To confirm the impact to the risk profile.
D . To add new controls to mitigate the risk.
Answer: D