Assessing risks involves: Option A Threat analysis Option B Vulnerability analysis Option C Risk analysis Option D Both a and b