No additional controls are required. Consideration may be given to a more cost- effective solution or improvement that imposes no additional cost burden. Monitoring is required to ensure that controls are maintained.
What action is required where a risk is deemed “tolerable”?
