The correct responses are 2 and 4: risk management is a continual process and helps companies ensure the smooth and successful running of P+S. These are direct quotes from p.3 of the study guide. The other answers are wrong- if risk management is a continuous process it's not something that is done once a year- so this option is automatically discounted. Option 1 is also wrong as you can never reduce all risks to 0, and option 5 is also wrong- risks can be treated and transferred, but they can also be tolerated and terminated.