risk buffer estimation