Decide: mapping a path forward

Once you have put your organization in context and understood exposure to risk, the third step is making suggestions toward a response plan.