Ide PC Risk Management policy briefing note July 2019