Deloitte interview question

Steps to implement risk management into the clients application?