Rethinking the implementation of enterprise risk management (ERM) as a socio-technical challenge · Study