Full AWS Practitioner Certification Question

Which of the following is NOT a component of performing an operational risk analysis?