Evaluation of risk management