integrating risk management and strategic planning