The principle of forming a risk monitoring system for an operating enterprise