defense risk organizational structure