Scenario: An organization is conducting a gap analysis as a part of its ZT planning. During which of the following steps will risk appetite be…

B During the gap analysis phase of Zero Trust (ZT) planning, risk appetite is typically defined when determining the target state. This step involves setting the desired security goals and objectives, taking into account the organization's tolerance for risk. Defining the risk appetite helps in aligning the ZT initiatives with the organization's broader risk management strategy, ensuring that the security measures are both effective and aligned with business objectives​​.