What must be included in the risk management approach, as a minimum requirement for applying the risk theme?
A. A description of the risk management procedure
B. An explanation-of the company’s risk appetite
C. The names of the assigned actionees for each risk
D. Estimations of the likelihood and impact of risks