once a vulnerability or risk has been identified, it is important to determine the risk rating. how is this determined? a. by the history of occurrence and the severity of impact b. by the rate of occurrence and the severity of impact c. by the possibility of occurrence and the severity of impact d. by the likelihood or probability of occurrence and the severity of impact