managing technical risk