Which activity is not part of risk assessment?
identifying threats and analyzing vulnerabilities
discontinuing activities that introduce risk
analyzing risks by criticality and cost
identifying and valuing assets