Which activity is not part of risk assessment?
discontinuing activities that introduce risk
analyzing risks by criticality and cost
identifying threats and analyzing vulnerabilities
identifying and valuing assets