tips for risk management understanding basics