Barrier based risk management is about identifying the critical controls (barriers) and understanding the status and effectiveness of the barriers to managing the risk.