Business Risk Management through Documentation