u Tailor responses to the scope of the identified risk
u Ensure responses are sensitive to potential negative impacts, e.g.:
s $EGRADATION OF ABILITY TO USE COMMERCIAL SOFTWARE
s $ECREASED RESPONSIVENESSINCREASED TIME TO DEPLOY TECHNOLOGY