why do we need to manage risks?​