The first response should be from the perspective of a Chief Financial Officer. The Chief Financial Officer is supportive of cybersecurity initiatives, understands the importance of addressing cyber risk however, holds responsibility for ensuring the company’s budget is balanced to meet demands across the company.The second response should be from the perspective of a Chief Risk Officer. The Chief Risk Officer is accountable to ensure risk accepted by management is with the company’s risk appetite. After reading their memo, what questions do you have, especially about their analysis of the risk and the company’s business risk appetite? What route would you suggest that the company pursue regarding the threat?