What all has to be identified as per risk identification?
(a) Threats
(b) Vulnerabilities
(c) Consequences
(d) All of the mentioned
I have been asked this question during an online exam.
My doubt is from Software Risks and Identification topic in section Software Management of Software Engineering