risk accept avoid transfer reduce on blue

risk accept avoid transfer reduce management strategy mitigation analysis assessment control exposure probability consequence threat vulnerability impact response prevention tolerance identification evaluation planning solutions allocation policies framework compliance measurement insurance liability financial operational security safety uncertainty decision-making factors process environment resources objectives implementation monitoring planning-phase procedures controls governance resilience