Challenges in hybrid risk management