We have adopted a four-step approach to the management of risk: Identifying the key risks We consistently apply the same methodology to identifying risk at Group, business unit, operation and project level.