- You can accept the risk; this may be after controls have been put in place to manage some risk, leaving a residual risk which you are prepared to accept
- You can transfer the risk, for example by taking out insurance cover. This may be appropriate when an adverse event is unlikely but would be severely impactful
- You can minimise the likelihood that adverse events will happen, for example by implementing good systems and processes internally
- You can avoid an activity altogether if you judge the risks to be too high. For example, you can decide not to take any money from governments to avoid the risk that you will be identified as supporting government policy