Design and implement a strategy to respond to identified risks

Sub-criteria

• Report findings to designated senior management (v1)
• Devise and adopt a risk management plan (v1)
• Implement the risk management plan (v1)