or control breakdowns/deficiencies that could impact residual risk are documented and communicated. Defend risk assessment... a consistent, effective, and timely RCSA program. This includes inherent risk identification, control identification, residual risk...