riskope methodology