One of the fundamental goals of IT policy is risk mitigation. What methods would you suggest to the CEO of your company to ensure that IT policy is actively involved in risk mitigation at the IT and company levels? Who needs to be involved in the development, review and maintenance of IT risk mitigation policy? Look at risk mitigation from an ethical standpoint. What do you think are the effects of ethics on risk? Can risk management ensure ethical compliance