How does a business measure and assess the risk it faces, and what tools does it have to address them? ​