3 simple risk management points that organisations overlook