Investigating a complex systems theory approach to controlling risk within complex projects