Risk management guidelines