While each department reviews risks related to their immediate responsibility, the risk management department prioritizes each risk, summarizes mitigation measures and updates the progress and reassessment.