When should risk be mitigated as part of the governance process?

A.
Before deploying applications in the cloud
B.
During the initial planning stage
C.
After user acceptance testing is completed
D.
During the strategy phase of the lifecycle
Explanation: