Yes. Identified deficiencies are assessed using a structured likelihood and consequence framework. Remedial actions are assigned priority and risk reduction is defined by the assessor.

Verified by MonsterInsights