Instead, it promotes a risk-based approach and suggests that, rather than trying to precisely measure risk, agencies focus on generally assessing and managing risks.
Agencies should focus on assessing and managing risks in general.