The operational risk function is responsible for ensuring that the business operates within risk ________ and risk ________.

a) Tolerance, appetite
b) Avoidance, mitigation
c) Exposure, assessment
d) Probability, impact