Which of the following are part of a risk-based approach?

Performing a comprehensive risk assessment to identify customer, transaction, and geographic risks

Focusing monitoring primarily on previously flagged customers while using standard controls for others

Choosing and applying effective controls that align with the identified risk levels

Determining detailed risk profiles for customers based on their activities and relationships

Allocating resources equally across all customer segments to ensure fairness