Organization and Operation of Risk Management