This process enables the management team of each business area to identify the areas of greatest risk so that they can prioritize these risks, assess the effectiveness of existing controls and plan a path for remediation when required, including the termination of contracts with third parties if needed.