risk tooling