WEB risk management