Comprehensive Risk Management policy