What consists of the identification of risks or threats, the implementation of security measures, and the monitoring of those measures for effectiveness?

• A. Risk management
• B. Risk assessment
• C. Security
• D. None of the above