Which is a use of the risk management policy in the ‘identify – context’ step for an activity?

A.
Recording departures from the risk management process guide

B.
Identifying the activity-specific categories to be used for grouping risks

C.
Providing guidance on setting risk tolerance thresholds

D.
Defining the records to be used