Risk framework review