At the data collection of risk management, all risks must be

• A. Identified
• B. Responded
• C. Categorized
• D. Described