three dimensions of risk management 1