Managing risk is done by identifying it, analysing it and then evaluating whether the risk should be modified by risk treatment in order to satisfy their risk criteria.
This document shows a standardised way for achieving this in an industrial environment.

SAGA_Technical Bulletin_1 of 2020