local level risk management