Risk management under the new Companies Act