What is risk assessment?
A. Process of obtaining a system, product, or service.
B. Controls to specific information system components responsible for providing a particular security
capability
C. Technique for concealing or destroying data so that others cannot access it
D. Process of identifying risks to organizational operations
