Towards a risk management framework for construction projects