White Paper: Lessons Learned When Implementing A Risk Management Program