phd thesis enterprise risk management