A project manager has assembled the project team, identified 56 risks on the project, determined what would trigger the risks, rated them on a risk rating matrix, tested their assumptions and assessed the quality of the data used. The team is continuing to move through the risk management process. What is the next step for the risk process?