proper risk management actions