Risk-managing the business model: locating tripwires at the start