Risk management must be followed