Risk trees