Mastering strategic risk : a framework for leading and transforming organizations