In the paper of L. Stabingis, J.D. Staliūnienė (2009) it was concluded, that selection of control procedures have been made doing following steps:
1. On the base of analysis of necessary internal and external factors of enterprise environment, its potential changes and important risk factors to form the list of applicable control procedures by answering to the following questions:
• What risks are?
• What probability of each risk is and what is size of possible losses?
• What factors of the risks are?
• What control procedures could be used and what are ongoing operations?
• How each control procedure affect on each risk factor?
• What influence on risk factors could be taken after refusing of control procedure or some its operations