encompassing four major categories of risk: hazard (insurable), operational, financial and strategic, and contrasts this with the traditional risk management process which focusses on hazard risk only ...