Which statement best describes the purpose of risk management?

A. removing all documentation B. ignoring vulnerabilities C. identifying, analyzing, prioritizing and treating security risks D. accepting every risk blindly