Which of the following steps are involved in a basic risk assessment?

A.
Determine what data and systems need to be protected

B.
Evaluate who are the potential threats

C.
Investigate potential legal, financial, and regulatory issues

D.
Determine the chances of a disaster or risk related event occurring

E.
All of the items listed

F.
None of the items listed