Management decides to implement a risk management system to reduce and maintain the organization's risk at an acceptable level. Which of the following is the co...