Which of the following MUST be assessed before considering risk treatment options for a scenario with significant impact?

A. Cost-benefit analysis.
B. Incident probability.
C. Risk magnitude.
D. Risk appetite.