Risk assessment and management plan