RISK-AWARE BUSINESS PROCESS MODELING: A COMPARISON OF DISCRETE EVENT AND AGENT-BASED APPROACHES