LITERATURE REVIEW
The term “risk” has conventionally been used to refer to any sort of unpredictability associated with the outcomes of an organisation (Miller, 1992). Smith and Merritt (2002) and, more recently, Perera et al. (2014) defined the management of risks as a systematic approach to the identification, assessment, evaluation, and ranking of the associated risks followed by the allocation of the necessary resources to monitor, control, and minimise any adverse impacts of undesirable events. Evidence has demonstrated that many successful