basic component of risk management