Business risk in early design: an approach