Good practice in risk assessment and risk management / 2 Protection, rights and responsibilities (Good practice in risk assessment and risk management, 1997)