3-59. Risk management is the process of identifying, assessing, and controlling risks that arise from operational factors and of making decisions that balance risk cost with mission benefits. Threat, hazard, capability, vulnerability, and criticality assessments are used to evaluate the risk to the force, determine critical assets, ascertain available resources, and apply security or defensive measures to achieve protection. Risk management helps commanders to preserve lives and resources, avoid or mitigate unnecessary risk, identify and implement feasible and effective control measures where specific standards do not exist, and develop valid COAs. Risk management integration during operations process activities is the primary responsibility of the unit protection officer or operations officer.