| Risk Level | Response Required | Review Frequency |
|---|---|---|
| Negligible | Accept and monitor. No immediate action required. | Annual |
| Low | Implement basic controls. Document and track. | Quarterly |
| Moderate | Develop and implement mitigation plans. Assign owner. | Monthly |
| High | Immediate action required. Escalate to management. | Weekly |
| Major | Stop activity if possible. Emergency controls. Escalate to leadership. | Daily |