Watch this video on YouTube
You are the IT risk manager at HDA Inc. What should be your recommendation if the level of risk in the IT risk profile has decreased and is now below management's risk appetite?