“risk management and program evaluation”