Risk assessment is a process A. That assesses the quality of internal control throughout the year. B. That establishes policies and procedures to accomplish internal control objectives. C. Designed to identify potential events that may affect the entity. D. Of identifying and capturing information in a timely fashion.