Minimum Requirements for Risk Management