A Blueprint for Risk Management