risk management operations