what is hierarchy of risk control