This document outlines the procedure for effectively assessing risks, implementing appropriate control measures and monitoring and reviewing the effectiveness of the controls.