Risk & Control Self-Assessment is the process of identifying potential risks, and then design and implement controls to manage these.