ccip risk management framework