MODULE 12 MITIGATION OF BUSINESS CRITICAL RISK AREAS