RA-7: Risk Response

From NIST's SP800-53:

Respond to findings from security and privacy assessments, monitoring, and audits in accordance with organizational risk tolerance.