Once the Risk Assessment component

Once the Risk Assessment component is implemented and the risks which threaten the achievement of the entity's objectives are identified and assessed, the onus is on the management and board of the entity to establish control activities that would
eliminate these risks or reduce their occurrences to the barest minimum or at least an acceptable level.