Harvard business review on managing external risk (Harvard Business School Pub., 2009)