network theory in risk assessment