Identify the correct order of risk investigation and rating process.
A. Probability that that risk could be realized against an asset
B. Identification of potential risk areas
C. Risk investigation and rating process
D. Severity level of the risk
E. Defining the risk impact
F. Mitigation listing
