Step 1: Identify risks
Step 2: Quantify risks
Step 3: Mitigate risks
Step 4: Monitor & review risks