Apache also has a separate risk management function focused specifically on operational risks, with an emphasis on health, safety, security and environmental risks, each of which is a critical risk category.