Which activity is not part of risk assessment?
identifying and valuing assets
analyzing risks by criticality and cost
discontinuing activities that introduce risk
identifying threats and analyzing vulnerabilities