After you have evaluated the level of risk, you need to decide how to mitigate them. You can use a risk response strategy to choose the best course of action for each risk. A risk response strategy is a plan that outlines how to reduce, avoid, transfer, or accept the risk. To reduce the risk, you can implement measures to lower the probability or impact of the risk. For example, you can test the technology, train the staff, or update the policies. To avoid the risk, you can eliminate the source of the risk or change the scope of the project. For example, you can drop the technology, modify the features, or target a different market. To transfer the risk, you can shift the responsibility or liability of the risk to another party. For example, you can outsource the technology, insure the project, or share the revenue. To accept the risk, you can acknowledge the existence of the risk and prepare for the consequences. For example, you can budget for the losses, communicate the risks, or monitor the situation.