legal risk definition