shortcomings of current ERM thinking and practice