Risk assessment methods probability distribution