The set of strategies, policies, and procedures put in place to ensure that any significant risk and associated risk concentration are detected, measured, limited, controlled, and mitigated, and that they are reported on, in a timely and comprehensive manner.