Mechanisms exist to reduce the magnitude or likelihood of potential impacts by resourcing the capability required to manage technology-related risks.
Does the organization reduce the magnitude or likelihood of potential impacts by resourcing the capability required to manage technology-related risks?