Which of the following functions includes identifying the sources of risk and may include offering advice on controls that can reduce risk?Risk managementRisk assessmentSystems testingVulnerability assessment