Verify business unit and functional risk mitigation plans are implemented ()