Prioritizing, evaluating, and implementing the appropriate risk-reducing controls/countermeasures recommended from the risk management process.SOURCE: CNSSI-4009; SP 800-30; SP 800-39