anchor: Once risk areas are identified, their potential impact on programs and activities should be measured and additional controls should be considered.
positive: The impact of risk areas should be studied.
negative: The impact of risk areas is never studied.