Stakeholder initiatives and regulation have encouraged the take-up of carbon footprinting but the practice has limitations as a measure of risk