There are two broad risk management strategies open to a financial institution (or
any other organization). One approach is to identify risks one by one and handle
each one separately. This is sometimes referred to as risk decomposition. The other
is to reduce risks by being well diversified. This is sometimes referred to as risk aggregation.
Both approaches are typically used by financial institutions.