Risk treatment is the process of selecting and implementing measures to modify the risk. As a minimum an effective risk system should provide effective and efficient operation of the organisation, effective internal controls, and compliance with laws and regulations.
Insurance is one way to treat risk; what other treatments are possible and on what basis should treatments be selected?