variance of risk