Evaluating the risk of disruptive events