The process of identifying and controlling risks is called

Question $4$ options:

$1)$

threat identification.

$2)$

risk management.

$3)$

cost$-$benefit analysis.

$4)$

risk quantification.