When conducting a risk assessment, which of the following should you do after identifying threats and threat likelihood?
A. Identify the organization's assets.
B. Identify vulnerabilities.
C. Identify a potential impact on suppliers
D. Identify the impact assessment.