Accountability in risk management