in sight for the advancement of technology, so we can expect the same from cybersecurity." ISACA's Risk IT framework ties IT risk to enterprise risk management. Duty of Care Risk Analysis (DoCRA) evaluates risks and their safeguards and considers the interests of all parties potentially affected by those risks. Petroleum and natural gas For the offshore oil and gas industry, operational risk management is regulated by the safety case regime in many countries. Hazard identification and risk assessment tools and techniques are described in the international standard ISO 17776:2000, and organisations such as the IADC (International Association of Drilling Contractors) publish guidelines for Health, Safety and Environment (HSE) Case development which are based on the ISO standard. Further, diagrammatic representations of hazardous events are often expected by governmental regulators as part of risk management in safety case submissions; these are known as bow-tie diagrams (see Network theory in risk assessment). The technique is also used by organisations and regulators in mining, aviation, health, defence, industrial and finance. Pharmaceutical sector The principles and tools for quality risk management are increasingly being applied to different aspects of pharmaceutical quality systems. These aspects include development, manufacturing, distribution, inspection, and submission/review processes throughout the lifecycle of drug substances, drug products, biological and biotechnological products (including the use of raw materials, solvents, excipients, packaging and labeling materials in drug products, biological and biotechnological products). Risk management is also applied to the assessment of microbiological contamination in relation to pharmaceutical products and cleanroom manufacturing environments. Risk communication See also Business continuity Catastrophe modeling for risk management Disaster risk reduction Enterprise risk management Environmental Risk Management Authority (NZ) Financial risk management Hawley's risk theory of profit (1893) International Institute of Risk & Safety Management ISO 31000 IT risk management Loss-control consultant National Safety Council (USA) Operational risk management Optimism bias Pest risk analysis Precautionary principle Project risk management Reference class forecasting Representative heuristic Risk analysis Risk appetite Risk assessment Risk management tools Roy's safety-first criterion Security management Social risk management Stranded asset Supply-chain risk management Three lines of defence References External links DoD Risk, Issue, and Opportunity Management Guide for Defense Acquisition Programs (2017) DoD Risk Management Guide for Defense Acquisition Programs (2014) Actuarial science Project management Risk analysis Security Systems engineering Communication studies IEEE standards ISO/IEC standards