Which one of the following is the only output for the qualitative risk analysis process?

A. Enterprise environmental factors
B. Project management plan
C. Risk register updates
D. Organizational process assets