What is the best description of a risk analysis?

A.
A risk analysis is a method of mapping risks without looking at company processes.

B.
A risk analysis helps to estimate the risks and develop the appropriate security measures.

C.
A risk analysis calculates the exact financial consequences of damages.

Explanation:
A risk analysis has four main objectives:
1. To identify assets and their value;
2. To determine vulnerabilities and threats;
3. To determine the risk that threats will become a reality and disrupt the operational process;
4. To determine a balance between the costs of an incident and the costs of a security measure.