Organizations’ evaluations for possible technological risks