Question $12$ of $50$

In ISO $27001,$ what is the primary purpose of risk assessment?

To identify new opportunities

To achieve regulatory compliance

To protect information assets from threats

To increase operational costs