In making informed risk decisions, what are the three basic actions?

A) Identifying control options, determining the effect of controls, and deciding on the next steps
B) Implementing controls, analyzing hazards, and documenting decisions
C) Conducting risk assessments, scheduling control implementations, and standardizing procedures
D) Identifying hazards, assessing risks, and implementing controls