How can we manage risks?
- Identify existing controls for particular risk raised
- Assess if the controls are adequate and effective (gap identification).
An organisation can also manage risk by improving and strengthening existing controls, or adding suitable controls (e.g. screen out events which can reduce the chance of getting the best possible outcome.)