An information security manager conducted a gap analysis, which revealed a 75% implementation of security
controls for high-risk vulnerabilities, 90% for medium vulnerabilities, and 10% for low-risk vulnerabilities. to
create a road map to close the identified gaps, the assurance team reviewed the likelihood of exploitation of
each vulnerability and the business impact of each associated control. to determine which controls to
implement, which of the following is the most important to consider?

a. kpi
b. kri
c. grc
d. bia

Write a program that prints the day number of the year, given the date in the form month-day-year. for example, if the input is 1-1-2006, the day number is 1; if the input is 12-25-2006, the day number is 359. the program should check for a leap year. a year is a leap year if it is divisible by 4, but not divisible by 100. for example, 1992 and 2008 are divisible by 4, but not by 100. a year that is divisible by 100 is a leap year if it is also divisible by 400. for example, 1600 and 2000 are divisible by 400. however, 1800 is not a leap year because 1800 is not divisible by 400.