Which of the following steps has the goal to reduce the level of risk to the IT system and its data to
an acceptable level?

A.
Recommended Controls

B.
Results Documentation

C.
Impact Analysis

D.
Risk Determination

Explanation: