The first two steps of ORM comprise
a) Identify hazards, assess risks
b) Assess risks, make decisions
c) Make decisions, implement controls
d) Implement controls, supervise