While assessing risk priorities, which of the following characteristics should be considered?
1) Potential impact, likelihood of occurrence, and sources
2) Potential impact and likelihood of occurrence
3) Potential impact, likelihood of occurrence, and cost of mitigation
4) Potential impact and cost of mitigation