I wrote a three transaction and the question was "which assertion related to the potential risk you identified"?

1)outflow the customer's personal information

2)When a customer cancelled their flight, the company is not giving the refund

3)Employees fake their overtime hours they worked to earn more money