Microbial risk assessment