Which of the following are the goals of risk management? Each correct answer represents a complete solution. Choose three.

Finding an economic balance between the impact of a risk and the cost of a countermeasure is a fundamental risk management goal, ensuring that security investments are proportional and justified relative to the threats they address.

Identifying risks is the foundational goal of risk management; without formally identifying risks, they cannot be assessed, prioritized, or treated.

Assessing the impact and likelihood of potential threats enables organizations to prioritize risks and allocate limited resources to the most significant exposures.

Identifying an accused person is a forensic investigation or legal process objective, not a risk management goal; risk management focuses on threats and vulnerabilities, not attribution of blame to individuals.