Model-based support for risk management