Which of the following statements are true about security risks?

They can be analyzed and measured by the risk analysis process.

They can be removed completely by taking proper actions.

They can be mitigated by reviewing and taking responsible actions based on possible risks.

They are considered an indicator of threats coupled with vulnerability.