the role of the chief executive officer in risk management