A risk management methodology with risk dependencies