Compose a brief (1-2-page max) document that includes a description of the steps you would take to establish a risk management framework that includes risk identification, prioritization, and confidentiality. Also include any legal or regulatory requirements and any other governance models (standards, etc.) that you think apply