The process risk model