Following a successful and well-publicized hacking incident, an organization has plans to improve application security.
Which of the following is a security project risk? 

Critical evidence may be lost. 

The reputation of the organization may be damaged.

A trapdoor may have been installed in the application. 

Resources may not be available to support the implementation.