Next steps include monitoring the effectiveness of controls and implementation of action plans, monitoring new internal and external risks that may threaten the achievement of strategic objectives, and defining action plans for risks that require additional analysis or guidance to those defined in the framework methodology.