Strengthening risk management across business functions