How would you plan risk-based testing for a high-impact financial system?