One concept which is widely used within the field of RM is called the risk management process (RMP) and consists of four main steps: identification, assessment, taking action and
monitoring the risks (Cooper et al., 2005). In each of these steps, there are a number of methods and techniques which facilitate handling the risks