What is a risk analysis used for?

A.
A risk analysis is used to express the value of information for an organization in monetary
terms.

B.
A risk analysis is used to clarify to management their responsibilities.

C.
A risk analysis is used in conjunction with security measures to reduce risks to an
acceptable level.

D.
A risk analysis is used to ensure that security measures are deployed in a cost-effective
and timely fashion.