Keep people at the centre of risk management, says consultant