According to NIST SP $800-30$ Guidelines for Conducting a Riak Assessment, which of the following represents the first component of risk management?

$1.$

The first component of risk management is assessing risk.

$2.$

The first component of risk management is framing risk.

$3.$

The first component of risk management is responding to risk.

$4.$

The first component of risk management is monitoring risk.