What is risk assessment and name two risk frameworks used in IT?

• A. Risk assessment is the process of maximizing risk; frameworks: ISO 9001 and ITIL.
• B. Risk assessment identifies vulnerabilities but not impacts; frameworks: COBIT and FAIR.
• C. Risk assessment is a formal process of auditing financial risk; frameworks: PCI DSS and HIPAA.
• D. Risk assessment is the process to identify, assess, and mitigate risk; frameworks: NIST SP 800-30, OCTAVE.

Answer: (D)