A business analyst is drafting a risk assessment.
Which of the following components should be included in the draft? (Choose two.)

A. Asset management
B. Database type
C. Encryption algorithms
D. Certificate name
E. Asset inventory
F. Data classification