Which of the following statements are true regarding risk response audits?

A. Risk audits are unplanned responses to emerging risks that were previously unidentified B. Risk audits should be performed by an outside party C. Risk audits are not necessary on small projects D. Risk audits consists of performing the contingency pla