Risk Assessment and Management Policy