The first step in risk identification would be to identify:

The first step in risk identification would be to identify:

A.
threats

B.
costs

C.
vulnerabilities

D.
assets