A business analyst is drafting a risk assessment.Which of the following components should be included in the draft? (Choose two.)