This metric asks whether the company identifies the steps it has taken or will take to identify, manage and/or mitigate its risks including any steps to improve due diligence.