identifying and mitigating potential risk management principles