and vertical aspects (applying the four layers of risk management ‘down the line’ – from base-line risk management through to issue-based risk management, task risk management and continuous risk management).