Which two activities are components of a risk management process?

Which two activities are components of a risk management process? (Choose two.)

A.
falsifying OS type

B.
selecting safeguards

C.
implementing controls

D.
masquerading as Nobody

E.
writing flames to /dev/null(7D)