According to the international standard ISO 14971, what is the definition of 'risk' in the context of medical devices?