static risk management