Strategic risk assessment framework