Companies that are developing a formalized risk management process are encouraged to document and specify the desired outcomes associated with each risk identified. What is the purpose of this activity?

Listing the outcomes desired by the organization creates a basis for prioritizing risks

Listing the outcomes desired by the organization creates a basis for assessing the potential impact of risks

Listing the outcomes desired by the organization creates a basis for determining which mitigation strategies should be pursued

Listing the outcomes desired by the organization creates for assessing the costs associated with each risk