How would you identify and assign change risk?

How would you identify and assign change risk?

A.
by reviewing impact and probability

B.
by reviewing impact and priority

C.
by reviewing severity and impact

D.
by reviewing severity and probability