David Gamble of Airmic explores a new standard that is helping firms get to grips properly with the complexities of risk management