Which of the following statements are true about security risks? Each correct answer represents a complete solution. Choose three.

A. They can be removed completely by taking proper actions.
B. They can be analyzed and measured by the risk analysis process.
C. They can be mitigated by reviewing and taking responsible actions based on possible risks.
D. They are considered an indicator of threats coupled with vulnerability.