risk environment