Why is a risk management strategy needed?

Why is a risk management strategy needed?

A.
It would take into consideration theft of data as a major risk

B.
The network can never be 100 percent secure.

C.
This will determine the risk/cost value.

D.
Each risk is equally detrimental to security.