What does the following code display?

Security professionals should at least understand the key management principles in Part 1 of SP 800-57

Indicate whether the statement is true or false.

Which of the following is not one of the three risk management activities in the security management process?

A) Protections B) Analysis C) Measures D) Plan