The MAIN goal of the risk analysis process is to determine the:

A. potential severity of impact.
B. control deficiencies.
C. frequency and magnitude of loss.
D. threats and vulnerabilities.