Systematic application of management policies, procedures and practices to the tasks of analysing, evaluating and controlling risk