risk management framework tutorial