Which term considers all types of risks or uncertainties that may impact achieving objectives?

• A. Frame
• B. Data Owner
• C. Risk Identification
• D. GDPR

Answer: (C)

Risk identification is the activity that catalogs every potential event or uncertainty that could affect reaching objectives. It covers all risk types—operational, strategic, financial, cyber, regulatory, supplier, and external factors—so you gain a complete view rather than focusing on one area. This broad view is essential because it provides the basis for evaluating likelihood and impact, prioritizing responses, and monitoring changes over time. Other terms don’t capture this broad discovery: a frame isn’t a standard term for listing all risks, a Data Owner is simply the person responsible for data, and GDPR is a privacy regulation, not the process of recognizing risks.