Risk Management in Higher Education : Do We Need it?