Avoiding Operational Disasters with a Process-Based Approach to Risk Management