Risk assessment is a process:

A. Designed to identify potential events that may affect the entity.

B. That establishes policies and procedures to accomplish internal control objectives.

C. Of identifying and capturing information in a timely fashion.

D. That assesses the quality of internal control throughout the year.