"common risk management framework"@en . "2"^^ . . . . . . . .