Ethics as a risk management strategy: the Australian experience