the risk management framework easily explained