Reputation risk ‘at an elevated level’ in wake of John Smyth case and historical safeguarding failures, says report