Risk management framework