High-level principles for risk management