This is the first step in developing a risk assessment and management policy. In developing your policy, consideration of risk appetite is critical. Identify the areas of financial and operational risk at CCH. Prepare a policy on how each area of risk should be handled (i.e., assume the risk, mitigate the risk, or transfer the risk). Prepare a table with the risks that you have identified, level of risk, strategy, and justification for choosing the strategy.