"Companies need to understand, manage and control the risks of doing