This entails conduct of detailed risk assessment of the organisation across various categories of risks and identification of mitigants. This review will culminate in drafting of risk registers for the organisation to facilitate monitoring / tracking of the residual risk and robustness of the mitigants implemented.