If cumulative risk assessment is the answer, what is the question?