text: Once risk areas are identified , their potential impact on programs and activities should be measured and additional controls should be considered .
  
  ###
  
  The impact of risk areas should be studied so that immediate changes can be made .