risk process