Decide which form of risk management is being used. Choose from risk avoidance, reduction, transfer or retention.