Controls are the means by which we seek to modify risks. ... Risk treatment normally involves activities that aim to change either the likelihood of the consequences or the type, magnitude or timing of those consequences.