Qualitative and quantitative risk analysis, Monte Carlo simulation, risk response planning, and establishing a risk-aware culture.