A well constructed Risk Management strategy requires the ability to identify and effectively mitigate risks in a consistent and repeatable way. Risk Management enables an organization to identify threats, prioritize mitigation strategies, identify remediation options, and measure the effectiveness and performance of the prioritized mitigation strategies and remediation options.