Which of the following functions includes identifying the sources of risk and may include offering advice on controls that can reduce risk?a. risk managementb. risk assessmentc. systems testingd. vulnerability assessment