← 2. Risk management: the three step process