Risk management by operation