A well executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives. What is not one of the four main objectives of a risk analysis?

A.
Identifying assets and their value

B.
Determining the costs of threats

C.
Establishing a balance between the costs of an incident and the costs of a security measure

D.
Determining relevant vulnerabilities and threats

Explanation:
A risk analysis has four main objectives:
– To identify assets and their value;
– To determine vulnerabilities and threats;
– To determine the risk that threats will become a reality and disrupt the operational process;
– To determine a balance between the costs of an incident and the costs of a security measure.