The first cell in a sheet is A0

____ is the second step in the process of implementing a formal compliance process.

A. Risk discovery B. Risk tolerance C. Risk mitigation D. Risk assessment

_________ controls access based on the roles that users have within the system and on rules stating what accesses are allowed to users in given roles.

Fill in the blank(s) with the appropriate word(s).