114 Risk strategy are compatible with existing activities, the risk management requirements are more likely to be accepted and fulfilled. This represents an alignment of risk management activities with existing protocols, in order to embed risk management in the organ- ization and create a more risk-aware culture. Alignment of activities Risk management activities and the risk architecture, strategy and protocols should be aligned with the business processes within the organization. Risk information flows around the risk management framework and (if successful) this will produce various outputs. These outputs have already been described as compliance, assurance, decisions and efficiency/effectiveness/efficacy (CADE3). Most risk management standards make reference to the upside of risk or discuss the management of opportunity risks. Project risk management, or the management of control risks, has become a separate discipline within risk management, and project risk management has become well developed, with separate guidance material. When considering the contribution that risk management can make to the organ- ization, it is important to decide whether the contribution will relate to strategy, projects and/or operations. This decision will enable the risk management activities within the organization to be aligned with the other business operations, processes