The role of risk measures in making seismic upgrading decisions