risk management and analysis