a part of the risk management process in which methods for neutralising or reduction of identified risks are implemented