•   Red = intolerable --> stop the activity
•   Yellow = tolerable --> reduce the risks over time
•   Green = acceptable --> continue as normal

Risk management strives for efficient risk reduction. Sometimes you see a mismatch between the evaluation and the steps that are recommended (or taken) in response. — This can be caused by incompetence or by
politics.

•Single actor --> Normal management
     •Integrated and stable agent
     •Internal power is high

•No actor/ Multiple actors -->Risk Governance      
•Cooperative structure of agents (e.g., treaty, institution)
       •Creates “organizational capacity” (IRGC 2005, 57)
       •The consequences must be taken into account: expense, time, additional control mechanisms, possible loss of “balance of powers” or “regulatory capture”

•Linear risks and complex risks may be handled technocratically.  With complex risks, interdisciplinary knowledge is needed.
•Risks with high uncertainty after assessment should be handled in a participatory way, seeking stakeholder consensus on a best way forward. Resilience should be stressed.
•Risks with high ambiguity need to be dealt with at a higher level.  This means going beyond mere stakeholder involvement, since we need a way of resolving stakeholder disagreement.  Hence, civil society (general political decision-making) is brought in.