Principles for the management of concentration risk