Risk management life cycle