Our Risk Framework requires identification and management of risks to be embedded in business activities through the following processes: Risk identification, Risk assessments, Risk treatment, Monitoring and review.