What is not one of the four main objectives of a risk analysis?

A well-executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives.

What is not one of the four main objectives of a risk analysis?
A . Identifying assets and their value
B . Implementing counter measures
C . Establishing a balance between the costs of an incident and the costs of a security measure
D . Determining relevant vulnerabilities and threats

Answer: B