and requires active management, therefore involving the assessment of sources of risk, the probability of occurrence of a certain event, and the consequences of their manifestation within the context of the control environment.