hazard risk-management direct and indirect