For a semester exam, which option is correct about risk management?

A. ignoring vulnerabilities B. identifying, analyzing, prioritizing and treating security risks C. accepting every risk blindly D. removing all documentation