Accountable Control Risk,”Planning involves risk identification, risk management planning, qualitative risk analysis, quantitative risk analysis, and risk response planning.3 criteria used for identifying the level of risk are: sensitivity
significance and susceptibility.”