Three aspects of risk impact determination except $\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_.$

a$.$

identifying business impact

b$.$

determining impact locality that is Risk Exposure

c$.$

identifying the threatened assets

d$.$

determining correction strategy