Risk assessment and risk management strategy