difference between hazard and risk