Risk Management Program Analysis - Part One