Process Of Pro-Active And Reactive Risk Management In An Organization