Risk-based management