Based on the Risk Assessment, a plan is developed to effectively manage these risks. The plan includes:

• A strategy for risk avoidance and mitigation
• Action plans, prioritized recommendations, compliance mechanisms, and development of metrics to achieve the desired risk tolerance