The selection of a strategy to address residual risk in an effort to bring it into alignment with the organization’s risk appetite.