A.Add the Risk Reviewer Composite duty role to theperson who creates the risks so he or she would be able to review them before saving the record.

B.Use only the Risk Approver Composite duty role in the configurations so the risks will not go through the review process.

C.Ensure that no user has been assigned a job role that includes the Risk Reviewer Composite or Risk Approver Composite Duty Role.

D.Ensure that only the upper management is given the Risk Reviewer Composite duty role so they could review the risks that they want to review.