A Framework for Risk Management