Consolidate Risk Assessments Risk Reporting Responding to Change Enforcing Compliance Controls Enforcing SOP's Managing Policy