Modern risk management must factor in the risk of not innovating