In any well-developed risk management program, two formal processes are at work.
a) Assessment and Authorization
b) Detection and Response
c) Identification and Analysis
d) Planning and Implementation