Product risk assessment: a Bayesian network approach