How firms in developing countries manage risk