In this study we bring together a top-down and a bottom-up approach of risk handling. We do so by conceptualizing and qualitatively and quantitatively measuring formal and informal risk handling strategies in a Dutch utility company. We conceive of formal risk handling as regulating, training...