Evaluate existing controls

It is unlikely that alliances will have existing controls in place to manage the identified risks, but regard should be given to this possibility.