Gravar-mail: Public–private partnerships, part 2: calculations of risk