Human risk management combines training, testing, monitoring and policy to reduce the risk that comes from people. Here’s how it works.