risk and resilience planning