risk-centric analysis