Integrating risk and performance in management reporting