In information security, which of the following is true about managing risk? A. All organizations except financial institutions should invest heavily in security safeguards. B. Passwords are classified as technical safeguards. C. Organizations should implement safeguards that balance the trade-off between risk and cost. D. Physical security is classified as human safeguards.C. Organizations should implement safeguards that balance the trade-off between risk and cost