Enterprises must establish processes to mitigate existing risk and reduce future risk. These processes must be run continuously and in parallel.