Once risk areas are identified, their potential impact on programs and activities should be measured and additional controls should be considered.
388995
The impact of risk areas should be studied.
388996
The impact of risk areas is never studied.