industry risk definition