THE VALUE OF NON-FINANCIAL INFORMATION IN SME RISK MANAGEMENT