Controlling is a function of the risk management process that involves monitoring to verify that actual performance matches the plans and taking corrective actions if needed.