Risk assessment The various control instances are themselves responsible for the identification of risks in their respective geographic or corporate areas of responsibility and for the creation of action plans to manage those risks.