A. A Risk Aversion Assessment should be conducted during the Implementation Governance phase to determine the degree of risk aversion of the proposed business transformation. After sharing the residual level of risk with the company chairman and the residual risk is not accepted, a set of parallel systems will be implemented to mitigate the risks.

B. Your recommendation is to use risk management techniques to assess the risks associated with the proposed business transformation and ensure the existence of business continuity plans. During the Implementation Governance phase you conduct a residual risk assessment to manage risks that cannot be mitigated.

C. Your proposal is to utilize a risk management framework during the Implementation Governance phase to verify the risks associated with the proposed transformation of the business. You then share with the concerned stakeholders the residual level on risk before the Architecture Contracts are released.

D. During the Architecture Vision phase a risk assessment is conducted to mitigate initial risks and address those in the Architecture Contract signed in the Implementation Governance phase.