A risk manager at a local bank is discussing the concepts of expected and unexpected loss with a risk analyst. The risk manager points out that unexpected losses can sometimes result from unknown or uncertain risks, or risks that are difficult to quantify. The analyst asks about ways to assess and manage these risks. Which of the following is a correct statement for the manager to make?