In which step of the risk management process will you conduct threat identification?
a. risk analysis
b. risk assessment
c. risk mitigation
d. risk response