Unstructured to Structured risk management transition with OSCAL