lifecycle risk management