Psychosocial risk management: The importance of evaluating risk controls