• identify feasible responses to risks, including prevention, impact mitigation, transfer and acceptance

• select the best response for each risk

• develop risk action schedules and other management measures, as appropriate