■ formulate a business risk controls policy and ensure that
everyone knows and understands it;
■ anticipate business risk at the source and monitor risk
controls continuously;
■ remember that the primary science of business risk is ineffec-
tive processes and controls rather than ineffective people.
How to Manage Risk 179