Modular risk management: an applied example