Then, any mitigations (such as existing test cases, automation, testing via usage, OEM testing, and so on) are deducted from
this known risk.
All components are then stack-ranked by the net risk, and these areas are addressed through test case development, automation, and processes.
The bottom line is to know what is at risk in the product and to always apply the resources at hand to methodically reduce the risk in the product.