This framework contains 13 best practices: develop a risk decision-making model, approach risk management analytically, involve team members, use flexible tools, draw upon academic research, use analytical tools, assess risks continuously, benchmark, incorporate risk management into project timelines, outsource, manage regulatory risk efficiently, use scenario planning and employ risk experts.