Risk Management: More Than A Regulatory Exercise