Sometimes, the entire RCD may be rewritten if new information substantially changes the conclusions. If risks are unacceptable, DPR then determines if risks can be controlled or mitigated. This is part of the risk management process. Risk management is the evaluation and selection of mitigation options. Regulators use risk management to determine an acceptable level of risk and then reduce exposures to that level.
Risk management is separate from risk assessment.
Unlike risk assessment, risk management is not based solely on scientific considerations, since it also involves social, economic, and legal considerations to make regulatory and policy decisions. DPR considers these factors in analyzing the possible regulatory responses to potential health hazards. The process is necessarily subjective in that it requires value judgments on the acceptability of risks and the reasonableness of control measures. If the risk assessment shows an unacceptable level of risk, various exposure mitigation measures are first explored. Exposure is the controllable element of risk.