Framework for assessing conduct risk through the product lifecycle