calculation of risk