Compares each assessed risk with the risk acceptance criteria, separates the risks a risk owner may accept from those requiring treatment, and sets priorities with their justification, taking business priorities into account.
Risks to evaluate — Only needed if you do not select a risk assessment as a source. List the risks and their ratings (1–5).
Risk acceptance criteria — Taken from the risk scoping when it is selected as a source.
Business priorities — Processes or objectives whose risks come first.
Roles and owners — Who is responsible for which area. Owners in the deliverable are taken from here; where no role covers an area, the owner is left for you to fill.
Additional context — Anything the service should take into account.
Title — As it will appear on the deliverable.
Author — Shown as the author of the deliverable; never filled in by the AI.
