control risks according to the