Consistency of Risk Assessment in Physical and Virtual Environments