Human factors in risk management