In the old forum, there was quite a bit of discussion about risk management. You may want to check there for that thread. There was, in particular(if I recall correctly), an Australian gentleman, whose name I can't remember now, that had some sort of responsibility for developing risk management programs. Anyway, check the old forum for that thread.