What is the process of evaluating IT assets, their importance to the organization, and theirsusceptibility to threats, to measure the risk exposure of these assets?

• A. risk management
• B. risk assessment
• C. security
• D. none of the above