Evaluating Complex Systems as Part of a Semi-Quantitative Risk Assessment