Identifies and quantifies enterprise, operational, and financial risks and designs controls to mitigate them.