risk management protocol