The following are measures for the management of risks EXCEPT

A. Identifying risks to system security
B. Evaluating and prioritising the identified risks
C. Developing controls to avoid the identified risks or control the risk within acceptable limits
D. Implementing the controls and monitoring their effectiveness
E. Allowing the risks to manifest and monitor control

Answer: E

Explanation: The correct answer is E because allowing risks to manifest is not a risk management measure. Instead, risk management focuses on identifying, evaluating, and controlling risks to prevent them from occurring.