$1\mathrm{.}2$ Once the risk assessment process is complete, management should have a list of all the threats posed to all assets, with an estimate of the magnitude of each risk. In addition, a risk evaluation provides input regarding the priority and urgency with which each threat should be addressed. The response to the identified risks is referred to as risk treatment. List and explain the four Risk Treatments $(5)$