managed risk