Companies spend considerably more energy to control their risks than to identify them. These are, however, two equally important activities in terms of effectiveness in controlling risks and activities.