A proper risk analysis has specific steps and objectives that it needs to accomplish. Which of the following lists these items?
A.
Identify assets and their values, identify vulnerabilities and threats, quantify the probability and business impact of these potential threats, and make non-economical countermeasure recommendations
B.
Identify assets and their values, identify vulnerabilities and threats, quantify the probability and business impact of these potential threats, and provide economical countermeasure recommendations
C.
Identify assets, identify vulnerabilities and threats, quantify the probability and business impact of these potential threats, and make economical countermeasure recommendations
D.
Identify assets and their values, identify fraud and collusion, quantify the probability and business impact of these potential threats, and make economical countermeasure recommendations
Explanation:
The proper steps are: Identify assets and their values, identify
vulnerabilities and threats, quantify the probability and business impact of these
potential threats, and provide economical countermeasure recommendations.