Watch this video on YouTube
When the inherent risk of a business activity is lower than the acceptable risk level, what is the best course of action?