What is risk management and why is it important?