risk management and cost control