Aligning strategic planning and risk management