How is Risk Assessment calculated in GFI EndPointSecurity 2013?