Risk management: the bigger picture