Order the phases of the risk management lifecycle from first to last.

### Why this is right Controls should respond to identified risks. Reviewing current safeguards shows what is already in place, and that review informs any additions or improvements. Documentation and monitoring support accountability and continuing adjustment. ### The order 1. **Identify and assess risks to assets**: determine the problems the controls should address. 2. **Evaluate existing controls**: assess whether current safeguards reduce those risks. 3. **Implement additional or improved controls**: address gaps found in the evaluation. 4. **Document findings and recommended measures**: record the assessment and actions. 5. **Monitor the systems and review for new threats**: check whether conditions change and whether further updates are needed. ### Terms - **Existing control**: a safeguard already operating before a new assessment or improvement. ### Remember Assess the risk and current safeguards before deciding what new control to add.