Which of the following is NOT a step in risk management?

A. risk assessment

B. risk reduction strategy

C. risk identification

D. refusing to reduce the risk regardless of the outcome