Methods of risk control (not mutually exclusive)
Risk reduction through changes in enterprise system design and management Risk reduction through Improved risk information management Risk neutralization through diversification across enterprises, space, and time Risk neutralization through transfer and/or sharing Risk retention (accept risks as they exist)