Environmental management systems and company performance: assessing the case for extending risk‐based regulation | Synapse