RISK MANAGEMENT FOR PUBLIC ENTITIES