Aligning risk management and strategic planning