ca final risk management