In designing a risk assessment, which approach involves constructing a course of action that governs how risk assessments should be performed?

A$.$ Establish governing policy control.

B$.$ Define goals and objectives.

C$.$ Create a risk assessment policy.

D$.$ Describe a consistent approach or model