A risk-based approach to navigating policy changes