risks are identified both top-down by management, and ground-up by our office and site teams, including internal audit, health and safety, security, environment, and community relations professionals.