Risk Assessment: It is a process to identify and assess risks to the achievement of objectives. Accordingly, this process forms a basis to determine the way of risk management. Because of the numbers and diversity of the risk that the businesses are subject to, risk assessment must be a dynamic and iterative process in this changing environment. The correct answer is D.