Risk evaluation seeks mainly to distinguish between what is irrelevant from what is material and requires active management, therefore involving the assessment of sources of risk, the probability of occurrence of a certain event, and the consequences of their manifestation within the context of the control environment.