Using a multipronged approach, chief risk officers can get a better grip on risk and build the strategic risk function of the future, says McKinsey