Which of the following is not a purpose of doing risk analysis?

A.
Delegate responsibility

B.
Quantify impact of potential threats

C.
Identify risks

D.
Define the balance between the impact of a risk and the cost of the necessary countermeasure

Explanation:
The other three answers are the main reasons to carry out a risk
analysis. An analysis is not carried out to delegate responsibilities. Management
will take on this responsibility once the results of the analysis are reported to
them and they understand what actually needs to be carried out.