Validating risk models with a focus on credit scoring models