What step comes after ranking risk?

• A. Implement controls
• B. Plan monitoring
• C. Identify mitigation options
• D. Collect data

Answer: (C)

When you rank risk, you’re prioritizing which hazards require attention first, based on how serious they are and how likely they are to occur. The next logical step is to identify mitigation options—ways to reduce either the likelihood of the hazard, the potential consequence, or both. This means exploring different controls or strategies that could lower the risk to an acceptable level, and evaluating which ones are technically feasible, affordable, and effective.

After identifying mitigation options, you would typically implement the chosen controls and then plan monitoring to verify that the controls are working as intended. Collecting data is important, but it usually feeds into the risk assessment and the ongoing monitoring process rather than being the immediate next step after ranking.