Legal Aspects of Risk Management