After we've done a risk assessment, we should begin to develop management plans for the highest-priority risks. There are four general approaches that can be used to manage any particular risk.
1. Accept It
De facto, this is what you do if you do not do anything else. It is appropriate for low-impact risks that are not worth actively managing. And for some very high-impact risks, it may be the only available course of action.