risk reporting and monitoring