The provider is accountable for all risk management.

You can manage, transfer, accept, or avoid risks.

The consumers are completely responsible for all risk.

If there is still residual risk after assessments and controls are inplace, you must accept the risk.

Risk insurance covers all financial losses, including loss ofcustomers.