December 23, 2021 by Admin
After assessing risk, the decision to treat the risk should be based PRIMARILY on:
- whether the level of risk exceeds risk appetite
- availability of financial resources
- whether the level of risk exceeds inherent risk
- the criticality of the risk