traditional risk management (TRM)