What is the nature and value of a risk management tool in a large-scale complex programme of collaborative applied health research?