calculate portfolio risk