What all has to be identified as per risk identification ?

A. Threats
B. Vulnerabilities
C. Consequences
D. All of the mentioned

Explanation: Risk identification states what could cause a potential loss.