Risk management for cultural heritage