The identified risks are further ranked and validated by the process owners and relevant members of management, resulting in a risk profile and priorities, and eventually culminating in our plan for management of those risks.