Once you reach a conclusion (threat/no threat decision) you take the appropriate measures to either:

A) Mitigate the risk.
B) Report the findings to authorities.
C) Ignore the situation.
D) Escalate the issue to higher management.