The Control Risks process governs the execution of risk planning, continuous risk tracking, recalibrating risk controls through reanalysis, and improving risk management processes.

As well as immanent and active risks, this process also manages residual risks that cannot be otherwise managed, but must be monitored for occurrence and impact.