Components and context of a risk management system