Probabilistic Risk Assessment: Lessons from Four Case Studies a