Which two basic approaches are combined when creating a risk management plan that reduces the impact of legal risk on an organization?

balancing the present $($commitment to stakeholders$)$ and learning from the past $($acknowledgement$)$

preventative $($evaluating risk$)$ and reactive $($providing a strategy to deal with risk$)$

functional $($assessing costs$)$ and reactive $($assessing the severity of the event after the fact$)$

balancing the needs of the organization $($internal analysis$)$ and seeking to shift risks to the public $($shift evaluation$)$