Core concepts supporting the risk-based approach