5 things you need to know about risk management