<p>2. Evaluating and managing risks</p>