Process-based risk measures and risk-averse control of discrete-time systems