Using Behavior Trees in Risk Assessment