Risk-based frameworks