Incorporating Human Factors into the Risk Management Process