chion and document what you did, when you did it, and how you did it. You can also assume at all countermeasures have been previously defined in a risk mitigation plan and approved by anagement. risk mitigation plan should be accompanied by a checklist, typically a spreadsheet containing e list of mitigation actions and the status of each item. A sample checklist is provided below