Operation Risk Management (ORM) is a continuous process designed to detect, assess, and control risks while enhancing performance and maximizing operational capabilities.

　　Step 3 of ORM involves the targeting of priority risk issues for control. Investigation on specific strategies and tools is presented that reduce, mitigate, or eliminate the risks. All risks have three components: probability of occurrence, severity of the hazards, the exposure of people, and equipment to the risk. Effective control measures reduce or eliminate at least one of these components. The analysis must take into account the overall costs and benefits of remedial actions, and provide alternative choices if possible.