An organization has received the results of their network security risk assessment.

Hire a security consulting firm with specialized expertise to fix all the issues on the report and ensure the organization’s system are secure.

Work with the organization’s legal team to ensure their cyber liability insurance policy will fully cover the costs of any breach related to the network risk assessment findings.

Create an organizational risk response team and assign them the task of remediating all the issues or identifying and implementing compensating controls.

Accept the risk of the issues within the organization’s risk tolerance and identify responses for the remainder of the issues.