which term describes the method of identifying vulnerabilities and threats and assessing the possible damage to determine where to implement security safeguards? question 55 options: information management risk analysis countermeasure selection classification controls