Enhancing ERM: Moving beyond the traditional risk assessment