Foundations and Practices of Effective Risk Management