A comparison of risk analysis approaches