These own and value an Asset and wish to reduce Risks that could damage them. In order to protect their Assets, they impose Controls that mitigate Risks. Where implementation of a Control is impossible or not economically feasible, they may approve ans.