Assessing aeromedical risk: a three-dimensional risk matrix approach