3. A problem-solving cycle identifying, controlling, and monitoring these scenarios at three levels: people in direct control of the risk, procedures and plans and a structure and policy level that at intervals reviews the current operation and makes structural improvements to it.