How to assess if there's unacceptable risk, decide which options are the most suitable to manage the risk and implement remediation if needed.