Creating a risk management strategy