Evaluation of risk in a telecommunications network