An enterprise recently implemented multi-factor authentication. During the most recent risk assessment, it was determined that cybersecurity risk is within the organization's risk appetite threshold.

What is the MOST appropriate action for the organization to take regarding the remaining cybersecurity residual risk?