Risk-based design of large-scale flood defence systems