Risk modeling pervasive in security management