Managing Activity and Programme Risk