risk characterization