risk management module ii key risks and their measurement