what are the four common methods of risk management