Recommendation 3 of the audit states that ECCC should:
Develop and implement a plan to mitigate information management risks associated with the Shared Drive and G&C Database, including developing guidance on document retention, and a strategy to monitor implementation.
What are the risks of that, and how do you intend to mitigate them?