Reputational risk management: is it important for corporate strategy?