How federal employees can become card-carrying experts on risk management