risk management architecture