What is the primary purpose of risk management in information assurance?

A. identifying, assessing, treating, and monitoring risk B. bypassing management approval C. deleting backup copies without approval D. disabling audit logs