Once the risks are defined an action plan must be put up to mitigate the risks. The plan and the risks need to be monitored and updated. The user needs to be able to save different versions of the risk matrix and the mitigation plan to follow up and report on progress during the year.
