mckinsey on risk and resilience issue 14