estimate the risk