The identified risks are further ranked and validated by the process owners and relevant members of management resulting in a risk profile and priorities (per business unit/business process), eventually resulting in our plan for management of those risks.