Capture, assess, and treat risks, and watch your risk profile fall over time.
Identify the risk
Log risks with context: category, owner, source, and a clear description.