An integrated and consistent framework is the key to effectively managing non-financial risks