Current process-based approaches to regulation are no longer fit for purpose