Which of the following is a comprehensive review of security posture?

A. Vulnerability assessment

B. Penetration test

C. Risk assessment