What is an activity in the security risk assessment process?

A.
Determining the extent of potential threats in the IT infrastructure

B.
Defining security measures to direct the safe execution of operations

C.
Ensuring that security measures comply with processes and policies

D.
Deploying security measures to mitigate the impact of risk occurrences