Why legal & reputation risk must be part of your business plan from day one