In the "assess and prioritise risks" stage of the risk management process, the rationale for selecting key risk measures should include ________.
1) historical success of key risk measures
2) compiling data from various internal and external sources
3) developing a reactive and preventive risk management function
