Four principles
Accept risk when benefits outweigh the cost. Accept no unnecessary risk. Anticipate and manage risk by planning. Make risk decisions in the right time at the right level.