Corporate governance and risk : a systems approach