Management of risk : case study 1 : implementing a systematic process for the