The first step in risk identification would be to identify:

The first step in risk identification would be to identify:

A.
assets

B.
costs

C.
threats

D.
vulnerabilities