Any help with this question?

Which of the following are NOT inputs to the risk identification
process?
A. Historical information
B. Risk categories
C. Risk management plan
D. Risk thresholds