how to calculate variance of risky investment