risk management case analysis