Managing business risk in client engagements