In order to effectively manage risks, companies must first be able to identify all relevant risks, understand their significance, realize the potential for exploitation of certain risks, or whether plans for mitigation must be implemented. We can identify differences in perception of risks among management and other stakeholders involved in the process. Once the identification process is complete, management can then focus on balancing risk and rewards.