Risk framework