RISK MANAGEMENT POLICY