Establish an internal infrastructure (team and process) that identifies the areas of business operations and practices that represent high risk, prioritize them and modify them to address risks.