How we identify risk and manage risks Any significant risks that remain after control at source are mitigated through codes of practice, policy, procedures, working practices and management instructions.