Which of the following statements are true about Risk analysis? Each correct answer represents a complete solution. Choose three.

A.
It recognizes risks, quantifies the impact of threats, and supports budgeting for security.

B.
It adjusts the requirements and objectives of the security policy with the business objectives and motives.

C.
It provides the higher management the details necessary to determine the risks that should be mitigated, transferred, and accepted.

D.
It uses public key cryptography to digitally sign records for a DNS lookup.

Explanation:
Risk analysis provides the higher management the details necessary to determine the risks that should be mitigated, transferred, and accepted. It recognizes risks, quantifies the impact of threats, and supports budgeting for security. It adjusts the requirements and objectives of the security policy with the business objectives and motives. The following are the stages in the risk analysis process.
1.Inventory
2.Threat assessment
3.Evaluation of control
4.Management
5.Monitoring

Answer option D is incorrect. It is not a valid statement about Risk analysis.