A Security Risk Analysis is performed to identify which of following in an organization?

Inherent weakness or absence of a safeguard that could be exploited by the threat

Potential for exploitation of a vulnerability or potential danger to a device, network, or data

The probability of incurring injury or loss

All of the above