An epistemological view on risk exposure assessment: A case study