A risk management plan typically consists of 4 main components:
A. Documenting the vulnerabilities
B. Conducting the risk assessment
C. Determining recommended mitigation actions
D. Communicating the recommendations to leadership