Risk management: a longer-term view