Which statement is true? O a. Firms may decide to "do nothing" and simply accept the risk to occur. O b. Firms typically prioritize high impact risks only. O c. Risk mitigation strategies are always c