tech firms risk management