The purpose of a risk-mitigation plan is to define and document procedures and processes to establish a __________ for ongoing mitigation of risks in the seven domains of an it