5.5.7.2 Reviewing the risk management strategy and risk mitigation plans