from diversification to risk management