deciding how to manage the risk and what actions should be taken.
Actions can be taken to reduce risk.