A taxonomy of risk in large UK industrial firms