how to manage risks