Applying a Systems Model to Enterprise Risk Management