Challenges in risk assessment and risk management