Where can a project manager find risk-rating rules?

Where can a project manager find risk-rating rules?

A.
Risk management plan

B.
Enterprise environmental factors

C.
Risk probability and impact matrix

D.
Organizational process assets

Explanation: