Last Updated on December 21, 2021 by Admin 2
When the inherent risk of a business activity is lower than the acceptable risk level, the BEST course of action would be to:
- monitor for business changes
- review the residual risk level
- report compliance to management
- implement controls to mitigate the risk