The model requires that control measures be based on a ______, and a continuous evaluation of effectiveness and suitability of the control measuresidentified risks can be either mitigated, avoided, limited, transferred to an outside entity, or accepted.