The owner's role in project risk management