What are the ways in which risk can be managed?