Developing and implementing strategies to treat identified risks, such as transfer, avoidance, or acceptance.