Strategic Principles for Managing Risk