“…66 To meet their obligations under this principle, risk managers must move toward a practice based on evidence and excellence. Examples of practice changes that might support this principle include adopting evidence-based approaches for risk control, 50,51,57,58,67,68 adopting proactive disclosure and settlement, and reducing or deimplementing 69,70 practices that have not proven effective, such as overuse of retrospective risk assessment at the expense of prospective risk assessment 54,71,72,73,74 or excessive focus on categorizing and reporting risks in ways that do not inform action. 75,76,77,78 Respect for privacy.…”