Medium Risk can be classified in the following three(3) ways: Unacceptable due to the absence of risk control, mitigating actions required; Unacceptable in the presence of existing risk control, mitigating actions required; or Acceptable in the presence of existing risk controls.