Which one of the following is the only output for the qualitative risk analysis process?

A. Project management plan
B. Risk register updates
C. Enterprise environmental factors
D. Organizational process assets