A. A Risk Aversion Assessment should be conducted during the Implementation Governance phase to
determine the degree of risk aversion of the proposed business transformation. After sharing the residual
level of risk with the company chairman and the residual risk is not accepted, a set of parallel systems will
be implemented to mitigate the risks.

B. During the Architecture Vision phase a risk assessment is conducted to mitigate initial risks and address
those in the Architecture Contract signed in the Implementation Governance phase.

C. Your proposal is to utilize a risk management framework during the Implementation Governance phase to
verify the risks associated with the proposed transformation of the business. You then share with the
concerned stakeholders the residual level on risk before the Architecture Contracts are released.

D. Your recommendation is to use risk management techniques to assess the risks associated with the
proposed business transformation and ensure the existence of business continuity plans. During the
Implementation Governance phase you conduct a residual risk assessment to manage risks that cannot be
mitigated.