After the risk assessment has occurred, it will be necessary to manage the results and determine what decisions need to be made next. Even when proceeding with a project, there will still need to be steps to ensure it follows your larger risk management program. This phase will walk you through the following activities:
- Determining which risk decisions to make after the assessment.
- Re-evaluating your countermeasures, if above the risk tolerance.
- Deciding between terminating the project or proceeding anyway, if it is proving to not go below risk tolerance.
- Tying this one assessment to the larger risk management program.
Use this phase as part of the full blueprint, Develop and Conduct Threat and Risk Assessments.