Crafting an effective construction risk management plan