A RISK MANAGEMENT STANDARD