On the first page under 'verification and assessment', they mention that they conduct internal assessment and risk analysis based on international indices and indicators. I think that is closest to 'risk management tool' as stated in the options but have requested this to be double checked.