Ensure risk acceptances and mitigation plans are in place as appropriate, with business sign off, and proactive management of risk governance.