Managing risk – the importance of building a culture of ownership