Companies that are developing a formalized risk management process are encouraged to document and specify the desired outcomes associated with each risk identified. What is the purpose of this activity? a) Listing the outcomes desired by the organization creates for assessing the costs associated with each risk b) Listing the outcomes desired by the organization creates a basis for assessing the potential impact of risks c) Listing the outcomes desired by the organization creates a basis for determining which mitigation strategies should be pursued d) Listing the outcomes desired by the organization creates a basis for prioritizing risks