Which of the following should NOT be a concern of Risk Management?

What type of change is pre-authorized, low risk, relatively common, and follows a procedure or work instruction?

Which is responsible for the production of the service design package (SDP)?

Which of the following should IT service continuity strategy be based on?
1. Design of the service metrics
2. Business continuity strategy
3. Business impact analysis (BIA)
4. Risk assessment

What are the three serviceprovider business models?