External event risk assessment: Methodology and application