This document outlines a procedure for effectively identifying and assessing the risks, implementing appropriate control measures and monitoring and reviewing the effectiveness of the controls.