In secure software design and development, what is meant by risk management?

A. removing all documentation B. accepting every risk blindly C. identifying, analyzing, prioritizing and treating security risks D. ignoring vulnerabilities