computer software which provides a generic means of providing risk management capability